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YEAR 2000 AND MEDICARE: IS HEALTH 
SERVICE DELIVERY AT RISK? 


MONDAY, SEPTEMBER 27, 1999 

House of Representatives, 

Subcommittee on Government Management, 
Information, and Technology, 
Committee on Government Reform, 

Washington, DC. 

The subcommittee met, pursuant to notice, at 2 p.m., in room 
2154, Rayburn House Office Building, Hon. Stephen Horn (chair- 
man of the subcommittee) presiding. 

Present from the Subcommittee on Government Management, In- 
formation, and Technology: Representatives Horn and Turner. 

Present from the Subcommittee on Technology, Committee on 
Science: Representative Morelia. 

Staff present: J. Russell George, staff director/chief counsel; Mat- 
thew Ryan, senior policy director; Bonnie Heald, director of commu- 
nications/professional staff member; Chip Ahlswede, clerk; P.J. 
Caceres, intern; Trey Henderson, minority counsel; and Jean Gosa, 
minority staff assistant. 

Mr. Horn. The hearing of the House Subcommittee on Govern- 
ment Management, Information, and Technology, in participation 
with the Subcommittee on Technology of House Science Committee 
will come to order. 

Today, we will hear testimony about the year 2000 preparations 
needed to guarantee the seamless delivery of health care financing 
by the Nation’s largest health insurer, the Federal Government. 
Through the Medicare program, the government provides health in- 
surance to more than 39 million senior citizens. 

Unfortunately, this massive health insurance program has severe 
weakness in its year 2000 readiness. Medicare has been identified 
by the President’s Office of Management and Budget as one of the 
43 essential Federal programs. Yet, 2 weeks ago, we reported that 
it is unknown when large portions of the Medicare program will be 
year 2000 ready. 

The outlook did seem alarming, and we hope to hear what the 
situation is today. As of last week, less than 2 percent of the 
230,000 hospitals, nursing homes, doctors and other health care 
providers who submit claims to Medicare had tested their computer 
systems with Medicare contractors. 

Of the nearly 4,000 health care providers who had begun this 
testing, many experienced significant failures. Worse, some health 
providers report that they are just not ready for the January 1st 
deadline. 
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We are not here today to be alarmists, but we do want to provide 
an accurate portrayal of Medicare’s Y2K landscape. 

In February, we held a hearing to review the Health Care Fi- 
nancing Administration’s year 2000 preparations. At the time, the 
agency’s systems were not ready. Since then, however, HCFA has 
made substantial progress in fixing and testing its systems. We 
commend them for this very hard work. Yet, equally strenuous 
work remains. 

HCFA has stated that if Medicare providers cannot submit prop- 
er claims, health care providers will not get paid. Furthermore, ac- 
cording to HCFA, providers who do not test their claims submis- 
sions are not exercising due diligence and, therefore, must be pre- 
pared to accept any cash-flow consequences that might arise from 
this lack of preparation. 

We will examine four key areas in the Medicare program today: 
First, whether the Health Care Financing Administration has com- 
pleted its final year 2000 computer tests; second, how some Medi- 
care contractors and providers are testing their computer systems; 
third, the year 2000 preparations of managed care organizations; 
and, finally, whether the Health Care Financing Administration, 
Medicare contractors and managed care organizations have devel- 
oped and tested their business continuity and contingency plans. 

Health Care Financing Administration, its contractors and 
health care providers have only 95 days to find an antidote to 
strengthen the Nation’s health care financing system. They must 
meet that deadline, because 39 million American seniors are de- 
pending on it. 

I welcome today’s panel of witnesses and look forward to their 
testimony. 

I’ll now yield to the co-chairman representing the Subcommittee 
on Technology of the House Committee on Science for an opening 
statement, and then I’ll yield to the ranking member on the Gov- 
ernment Management, Information, and Technology Subcommittee. 

[The prepared statement of Hon. Stephen Horn follows:] 
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Opening Statement 
Chairman Stephen Horn (R-CA) 
Subcommittee on Government Management. 
Inforroatum. and Technoiogv' 
September 27, 1999 


Tliis hearing of the House Subcommittee on Government Management. 

Information, and Technology, in panicipation with the Subcommittee on Technology will 
come to order. 

Today, we wilt hear testimony about the Yew 2000 preparations needed to 
guarantee the seamless delivery of health care financing by the nation's largest health 
insurer — the federal government. Through the Medicare program, the g>vemment ‘ 
provides health insurance to more than 39 million Sttiior citizens. 

Unfortunately, this massive health insurance program has severe weaknesses in its , 
Year 2000 readiness. Medicare has been idoitifted by the President's Office of 
Management and Budget as one of 43 essentia! Federal programs. Yet. two weeks ago. , . 
we reponed that it is unknown when large portions of the Medicare program will be Year 
2000ready. . ; 

The outlook is alarming. As ofia^w^k, less than 2 percent of the 230.000 
hospitals, nursing homes, doctors and other health care providers who submit claims lb 
Medic;u:e had tested their computer systms with Medicare contractors. 

Of the nearly 4.000 health care inovid^s who had begun this testing, many . 
experienced significant failures. Worse, some health providers report that they are just 
not ready for the January 1 deadline. 

We are not here today to be alantiists. but vre do wjmi to provide an accurate 
portrayal of Medicare’s Y2K landscape. 


I 
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In Febraary, we held a hearing to review the Health Care Financing 
Administration’s Year 2000 preparations. At the time, the agency’s systems were not 
ready. Since then, however, HCFA has made substantial progress in fixing and testing its 
systems. We commend this hard woric. Yet, equally strenuous work remains. 

HCFA has stated that if Medicare providers cannot submit proper claims, health 
care providers will not get paid. Furthermore, according to HCFA, providers who do not 
test their claims submissions are not exercising due diligence and, therefore, must be 
prepared to accept any cash-flow consequences that might arise from this lack of 
preparation. 

We will examine four key areas in the Medicare program today: 

First, hether HCFA has completed its final Year 2000 computer tests; 
Second, how some Medicare contractors and providers are testing their 
computer systems; 

Third, the Year 2000 preparations of managed care organizations; and 
Finally, whether HCFA, Medicare contractors, and managed care 
organizations have developed and tested their business continuity and 
contingency plans. 

HCFA, its contractors, and health care providers have only 95 days to find an 
antidote to strengthen the nation’s health care financing system. They must meet that 
deadline, because 39 million American seniors are depending on it. 

I welcome today’s panel of witnesses, and look forward to their testimony. 
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Mrs. Morella. Thank you, Mr. Chairman. 

Mr. Chairman, this past February we held a hearing that exam- 
ined the status of the efforts of the Department of Health and 
Human Services focusing on the Health Care Financing Adminis- 
tration to prepare for the technical challenges associated with the 
year 2000 problem, and at that hearing the GAO, General Account- 
ing Office, reported the severe difficulties HCFA has experienced 
with Y2K, stating that, “HCFA and its contractors were severely 
behind schedule,” in preparing, testing and implementing the mis- 
sion-critical systems that support Medicare. 

Faced with this stark finding, there was little or no confidence 
from the approximately one-quarter of our Nation’s population who 
receive over $170 billion annually of Medicare and Medicaid assist- 
ance that their elderly, disabled or indigent benefits would con- 
tinue uninterrupted after January 1st, 2000. Subsequent to the 
hearing, we’ve seen the agency undertake dramatic actions in man- 
agement, resources, personnel and funding to correct the Y2K prob- 
lem. Are these refocused efforts, however, enough to overcome 
HCFA’s auspiciously horrendous start? HCFA says yes, but others 
and I are not quite so certain. 

You have to be concerned when HCFA just last week tells us 
that only 2 percent of their physicians and hospitals that submit 
claims to them have tested their computer systems with Medicare 
contractors, and of those that have tested their systems, 10 to 20 
percent have experienced significant failures. These startling facts 
are obviously not very comforting. 

I know that HCFA disputes some of the GAO’s conclusions, and 
I know that both HHS and HCFA have demonstrated a great deal 
of progress in the last quarter. So I look forward to hearing from 
our distinguished panel today and especially to hear our witnesses 
representing other Medicare partners to determine exactly where 
the agency stands in their Y2K remediation and validation efforts. 
No less than a successful continuation of our Nation’s health and 
welfare is at stake, especially for those who can least afford a dis- 
ruption in their health benefits. If there are to be any disruptions, 
the American people need to know that there should be adequate 
contingency plans to cover any failures related to Y2K. 

So, Mr. Chairman, I look forward to hearing from our witnesses 
on this critical problem. 

[The prepared statement of Hon. Constance A. Morella follows:] 
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Congresswoman Constance A. Morelia 

Chairwoman, Technology Subcommittee 
House Science Committee 
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Hearing on "The Year 2000 Computer Problem and Medicare: 
Is Health Service Delivery at Risk?" 

Monday, September 27, 1999 


Mr. Chairman , this past February we held a 
hearing that examined the status of the efforts of the 
Department of Health and Human Services (HHS) - 
focusing on the Health Care Financing Administration 
(HCFA), to prepare for the technical challenges 
associated with the Year 2000 problem. 

At that hearing, the General Accounting Office 
(GAO) reported the severe difficulties HCFA has 
experienced with Y2K stating that "HCFA and its 
contractors were severely behind schedule" in 
repairing, testing, and implementing the mission- 
critical systems that support Medicare.” 
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Faced with this stark finding, there was little or no 
confidence from the approximately one-quarter of our 
nation’s population, who receive over S170 billion 
annually of Medicare and Medicaid assistance, that 
their elderly, disabled, or indigent benefits would 
continue uninterrupted after January 1, 2000. 

Subsequent to the hearing, we have seen the 
agency undertake the dramatic actions in 
management, resources, personnel, and funding to 
correct the Y2K problem. 

Are these refocused efforts, however, enough to 
overcome HCFA’s auspiciously horrendous start? 

HCFA says “yes,” but others and I are not quite so 
certain. 

You have to be concerned when HCFA, just last 
week, tells us that only 2% of the physicians and 
hospitals that submit claims to them have tested their 
computer systems with Medicare contractors — and of 
those that have tested their systems, 10-20% have 
experienced significant failures. 

These startling facts are obviously not very 
comforting. 
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I know that HCFA disputes some of GAO’s 
conclusions and I know that both HHS and HCFA 
have demonstrated a great deal of progress in the last 
quarter. 

So, I look forward to hearing from our 
distinguished panel today - especially to hear our 
witnesses representing other Medicare partners — to 
determine exactly where the agency stands in their 
Y2K remediation and validation efforts. 

No less than the successful continuation of our 
nation’s health and welfare is at stake — especially for 
those who can least afford a disruption in their health 
benefits. 

If there are to be any disruptions, the American 
people need to know there should be adequate 
contingency plans to cover any failures related to 
Y2K. 
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Mr. Horn. I thank my colleague and now would yield time for 
an opening statement to the ranking member of the Subcommittee 
on Government Management, Information, and Technology, Mr. 
Turner of Texas. 

Mr. Turner. Thank you, Mr. Chairman. 

It’s good to have all of our witnesses here today to talk about this 
very important issue. I’ve always held the opinion that some of the 
greatest risks facing us with regard to Y2K problems was in the 
health care industry and HCFA, which relates primarily to the 
prompt payment of claims and ensuring the system works. We 
know that that is a critical part. 

There are many hospitals today that a short disruption in pay- 
ments could represent financial destruction for them. So I think it’s 
very important that we continue to pay attention to this issue, as 
we have done through several meetings of this committee held 
jointly with Chairwoman Morelia and her subcommittee. 

I do believe that in February we found that there were problems 
remaining at HCFA. I do understand that much progress has been 
made in the last few months; and, of course, the purpose of our 
hearing today is to address the remaining areas of concern that we 
have at the committee. 

I thank the Chair for continuing to stay on top of this very im- 
portant matter because, after all, HCFA is the largest health in- 
surer in the entire Nation and pays out $288 billion a year. It’s a 
very important agency to the many billions of Americans who de- 
pend upon Medicare for their health care. 

Thank you, Mr. Chairman. 

[The prepared statement of Hon. Jim Turner follows:] 
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STATEMENT OF THE HONORABLE JIM TURNER 
HEARING ON “YEAR 2000 AND MEDICARE: IS HEALTH SERVICE 
DELIVERY AT RISK?” 

SEPTEMBER 27, 1999 

Thank you, Mr. Chairman. The focus of this hearing is to assess the status 
of the Health Care Financing Administration’s (HCFA) progress in combating the 
Y2K problem. As the nation’s largest health care insurer -- Medicare expects to 
pay about $288 billion annually by the Year 2000 -- the consequences of HCFA’s 
systems not being Y2K compliant could be enormous. In September 1998, the 
General Accounting Office (GAO) repotted that HCFA and its contractors were 
behind schedule in repairing, testing, and implementing the mission-critical 
systems supporting Medicare. At that lime, GAO concluded that it was highly 
imlikely that all Medicare systems would be compliant in time to ensure 
uninterrupted delivery of benefits and services. 

On February 26, 1999, this Subcommittee held a hearing to examine 
HCFA’s preparations for the Y2K computer problem. We found that HCFA was 
indeed behind schedule, thus placing the Medicare program at risk. 

To date, HCFA has made significant progress and believes that it maintains 
a low Y2K risk. All of HCFA’s internal systems have been renovated, end-to-end 
tested, certified compliant, and implemented. In addition, all of the external 
claims processing systems, those operated by private insurance contractors that 
process Medicare fee-for-service claims and pay bills, have been fully tested and 
certified as compliant, and are processing claims today. HCFA’s independent 
verification and validation (IV & V) expert, widi oversight fi-om the Department’s 
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Inspector General and GAO, has verified the readiness of these external claims 
processing systems. 

While I want to commend the Agency for its hard work, several crucial 
issues currently remain. HCFA still needs to; (1) develop and review integrated 
testing plans for its business partners, (2) complete independent tests of standard 
systems, (3) resolve managed care organizations’ certification qualifications 
expeditiously, (4) monitor health care provider testing with contractors, and (5) 
validate fee-for-service and managed care organizations’ business continuity and 
contingency plans. Nonetheless, HCFA maintains that adequate time exists and 
that it is committed to taking the necessary steps to ensure that its beneficiaries are 
not adversely affected by the Y2K challenge. 

We need to ensure that Y2K preparedness and contingency planning at 
HCFA are completed on time. If not, millions of beneficiaries who depend on 
HCFA for healthcare could be affected. I look forward to the testimony today, and 
I want to commend the Chairman for his focus on this important issue. 
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Mr. Horn. Thank you very much. 

Let me explain how this subcommittee functions. We would 
like — ^because we do have your statements, we’d like it if you could 
summarize between 5 and 10 minutes each of your statements. 
That will give us more of an opportunity for dialog among the 
panel, as well as dialog with the members and the panel, but don’t 
feel bad if you worry about the 5 to 10. Just take the time you need 
to tell the story, and if we can tell it succinctly, that helps. 

The other thing is that we do submit all of our witnesses and 
their staff that might tell them what the answer is on questions, 
we are really down to, as an investigative committee, to giving the 
oath. So if you don’t mind standing and putting up your right 
hands, with the people that will advise you also taking the oath, 
then I don’t have to have 18 baptisms here. 

[Witnesses sworn.] 

Mr. Horn. I have six witnesses, and I have six helpers, all of 
which are important. So let us just go down the way we have it 
on the agenda. 

That’s Mr. Willemssen, the Director of Civil Agencies Informa- 
tion Systems, U.S. General Accounting Office. He’s been our prin- 
cipal witness at every system I think this last year, be it in the 
States or overseas or here, wherever. So he has a lot of knowledge, 
and we’d appreciate his summary of what the GAO has done in 
terms of their studies on Medicare in particular. 

Mr. Willemssen. 

STATEMENT OF JOEL WILLEMSSEN, DIRECTOR, CIVIL AGEN- 
CIES INFORMATION SYSTEMS, U.S. GENERAL ACCOUNTING 

OFFICE 

Mr. Willemssen. Thank you. Chairman Horn, Chairwoman 
Morelia, Ranking Member Turner. Thank you for inviting GAO to 
testify today. As requested, I will briefly summarize our statement 
on the readiness of Medicare and Y2K. 

HCFA continues to make progress in its efforts to address nu- 
merous Medicare Y2K issues. For example, HCFA is more effec- 
tively identifying and managing risks. It also is more effectively 
managing its electronic data exchanges and has improved its test- 
ing program. 

HCFA has also shown progress in the development of its busi- 
ness continuity and contingency plans and has taken comprehen- 
sive measures in conducting numerous Y2K outreach activities. 

Even with this progress, however, HCFA still faces a consider- 
able amount of work and challenges over the next few months. For 
example, HCFA is using a less than ideal approach of having key 
claims processing systems tested concurrently. Because of the lim- 
ited time remaining, HCFA, though, has little choice but to test in 
this manner. This approach invites additional risk because resolv- 
ing one system’s testing errors can lead to problems in another sys- 
tem that’s being tested at the same time. Therefore, HCFA must 
aggressively manage these risks through an integrated testing 
schedule that defines interdependencies and a critical path, estab- 
lishing the sequence in which tasks must be completed. 

In addition to these system interdependencies, ongoing testing of 
contractors’ systems continues to identify errors, some of which 
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would result in Y2K failures. HCFA’s use of system quality assur- 
ance tools also continues to find system problems that will need to 
be resolved in the short time remaining. 

HCFA also will need to carefully manage contractor transitions 
to a new data center that is planned between now and early No- 
vember and will have to implement its policy of minimizing system 
changes during the rollover period. 

HCFA faces challenges in several other areas. For example, as 
noted earlier by you, Chairwoman Morelia, contractor progress and 
testing with providers has been disappointing. The most recent 
available HCFA information shows that more than half of HCFA’s 
contractors have tested with less than 1 percent of their providers, 
and for the testing that has been done an error rate of 10 to 20 
percent is being reported. 

In addition to fee-for-service contractors, many of Medicare’s 
beneficiaries are enrolled in managed care organizations. The avail- 
able data on the Y2K status of these organizations also raise con- 
cerns. In June, only 4 of 425 of these organizations were reporting 
that they were fully compliant. Further, HCFA’s Y2K risk assess- 
ments of managed care organizations showed that 94 of them were 
considered high risk. 

To ensure that managed care organizations are adequately ad- 
dressing Y2K, HCFA is conducting site visits covering 184 of these 
organizations; and as part of our ongoing work for the Senate Spe- 
cial Committee on Aging, we plan to followup on HCFA’s actions 
in this area. 

Given the magnitude of the challenges that HCFA faces, the de- 
velopment of business continuity and contingency plans is crucial. 
HCFA has completed its agency-wide business continuity and con- 
tingency plan that includes 29 internal plans. However, essential 
validation activities still remain. 

Regarding contractor business continuity and contingency plans, 
their status is essentially unknown. Our assessment of available 
plans revealed that most contractors did not have specified detailed 
procedures that are required for executing and testing the plans. 

The status of contingency plans for managed care organizations 
is also not encouraging. By early September HCFA had received 
plans from over 300 of these managed care organizations. However, 
its review concluded that about 69 percent of them needed major 
improvement. 

In conclusion, it’s clear that HCFA has made substantial 
progress on Y2K over the last several months. Nevertheless, the 
agency still faces a considerable amount of work and challenges 
over the next few months to ensure that Medicare providers will 
be made paid and beneficiaries will continue to receive care. 

Thank you. 

Mr. Horn. Thank you very much. 

[The prepared statement of Mr. Willemssen follows:] 
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Mr. Chairman, Ms. ChairwomMi, and Members of the Subcommittees; 

Thank you for inviting us to participate in today's hearing on Medic^e Year 2000 (Y2K) 
issues. Successful Y2K conversion of the automated systems that are used by the 
Department of Health and Human Services’ (HHS) Health Care Financing 
Administration (HCFA) and its contractors to process Medicare claims is essential to 
ensuring that the delivery of health care services to millions of Americans is not 
negatively impacted. 

We initially reported on HCFA’s Y2K program in 1997, making recommendations to 
improve the agency’s program management.' In our last report in April 1999, we stated 
that HCFA had been responsive to our recommendations, but that critical Y2K risks and 
challenges remained.^ At that time, we also reported that HCFA’s final tests of its 
mission-critical systems that are expected to be completed by November 1 , 1999, will 
ultimately determine whether HCFA’s systems are Y2K compliant. Due to the late time 
frames associated with these final tests and the mwy challenges still confronting HCFA, 
we stressed the importance of the agency’s business continuity and contingency planning 
efforts. 

As requested, after a brief background discussion, today I will summarize HCFA’s 
progress in addressing its Y2K challenges to date, and describe the key challenges that 

' Medicare Transacrion System: Success Depends Upon Coirectinp Critical Managerial and Technical 
Weaknesses fGAO/AIMD-97-78. Mav 16, 1997). 

^ Year 2000 Computing Crisis: Readiness of Medicare and the Health Care Sector (GAO/T-AlMD-99-160, 
April 27, 1999). 
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confront HCFA in completing the final Y2K tests of its mission-critical systems by 
November 1, 1999. I will also discuss that HCFA must (1) ensure that Medicare 
contractors are testing with providers, (2) monitor managed care organization’s (MCO) 
efforts to address their Y2K risks, and (3) complete and validate internal, contractor, and 
MCO business continuity and contingency plans. 

BACKGROlfr^ 

Medicare is the nation’s largest health insurer, serving about 39 million Americans by 
providing federal health insurance to individuals 65 or older and to many of the nation's 
disabled. By 2000, HCFA expects to process over 1 billion claims and pay $288 billion 
in fee-for-service and managed care benefits annually. The consequences, then, of its 
systems’ not being Year 2000 compliant could be enormous. 

Medicare Claims Processing Systems Are Numerous and Complex 

HCFA operates and maintains 25 internal mission-critical systems; it also relies on 75 
external mission-critical systems operated by contractors throughout the country to 
process Medicare claims. These external systems consist of 68 claims processing 
contractor systems, 6 standard systems, and the Common Working File (CWF). Each of 
the claims processing contractor systems relies on one of the six standard systems to 
process its claims, adding its own front-end and back-end processing systems. The CWF 
is a set of databases located at nine sites that works with internal and external systems to 
authorize claims payments and determine beneficiary eligibility. 


2 



17 


In addition to the 25 internal and 75 external contractor systems, the claims process 
involves over 1 million healthcare providers and numerous banks serving both 
contractors and providers. HCFA also relies on external systems located at 383 MCOs. 
Although HHS has not designated the MCOs as mission-critical in its Y2K quarterly 
status reports to the Office of Management and Budget (OMB), these systems are 
nevertheless vital since they are used to serve 6.9 million of the 39 million Medicare 
beneficiaries. 

Past Recommendations to Improve HCFA’s 

Management of Its Medicare Y2K Program 

We originally highlighted our concerns with HCFA’s management of Medicare Y2K in 
May 1997. ^ At that time, we made several recommendations for improvement, 
including that HCFA identify responsibilities for managing year 2000 actions and that 
Medicare contractors submit to HCFA their Y2K plans and validation strategies. In our 
report last September, we warned that although HCFA had made improvements in its 
Year 2000 management, the agency and its contractors were severely behind schedule in 
making mission-critical systems that process Medicare claims Year 2000 compliant.^ 
Our conclusions and recommendations at that time reflected our concern about the high 
level of risk and large number of tasks still facing HCFA. Among our specific 
recommendations was that the HCFA Administrator 


’ GAO/AIMD-97-78, May 16, 1997. 

* McdicaTC Computer Svatam; Year 2000 Chaltengts Pul Benefits and Services I n leamnlY 
(GAO/AlMD-98-284, September 28, 1998). 
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■ rank remaining Year 2000 work on flie basis of an integrated project schedule and 
identify the Y2K project’s critical path to ensure that all critical tasks were prioritized 
and completed in time to prevent unnecessary delays; 

■ develop a risk management process; 

■ ensure that all external and internal systems' data exchanges had been identified and 
agreements signed among exchange partners; 

■ define the scope of an end-to-end test of the claims process and develop plans and a 
schedule for conducting such a test; and 

■ accelerate the development of business continuity and contingency plans. 


This February, we testified that, although HCFA had been responsive to our 
recommendations and that its top management was actively engaged in its Year 2000 
program, its reported progress was highly overstated.^ We reported that none of HCFA’s 
54 external mission-critical systems reported by HHS as compliant as of December 31, 
1998, was Year 2000 ready because all had important associated qualifications 
(exceptions), some of them significant. Further, we reported that HCFA continued to 
have serious Year 2000 challenges, including a significant amount of testing since 

^ Year 2000 Computing Crisis: Readiness Status of the Department of Health and Human Services 
{GAO/r-AIMD-99-92, February 26, 1999). 
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changes would continue to be made to its mission-critical systems to make them 
compliant. 

In April, we testified that HCFA reported that most of the qualifications associated with 
HCFA’s mission-critical systems had been resolved.^ Further, we noted that HCFA had 
continued to be responsive to our recommendations in critical areas such as managing its 
electronic data exchanges and developing business continuity and contingency plans. 
Nevertheless, critical Y2K risks and challenges remained. For example, we reported that 
the mission-critical systems HCFA deemed compliant were not the final systems that 
would be processing Medicare claims on January 1, 2000, because these systems were to 
undergo a significant amount of change between then and July 1, 1999, for both Y2K- 
related and other reasons. In addition, we reported that HCFA’s testing to date of 
external systems had not been rigorous. Therefore, we stressed the importance of 
HCFA’s final recertification tests, planned to occur between July 1 and November 1, 
1999. 

HCFA*S ACTIONS TO ACHIEVE COMPLIANCE AND BOLSTER 
OUTREACH EFFORTS TO MEDICARE PROVIDERS 

HCFA continues to be responsive to our recommendations and make progress in its Y2K 
efforts. To more effectively identify and manage risks, HCFA is relying on multiple 
sources of information, including test reports, rqjorts from its independent verification 
and validation (IV&V) contractors, and weekly status reports from its contractor 

^ GAO/T-AIMD-99-160, April 27, 1999. 
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oversight teams. In addition, HCFA has stationed staff at critical contractor sites to 
assess the data being reported to them and to identify problems. 

HCFA is also more effectively managing its electronic data exchanges. It issued 
instructions to its contractors to inform providers and suppliers that they must submit 
Medicare claims in an 8-digit format by April 5 of this year. On September 22, HCFA 
reported that 99 percent of Part A providers and all Part B providers were using the 8- 
digit format for claims submissions.’ HCFA also issued new instractions to contractors 
for reporting on data exchanges and created a new database to track status. 

HCFA has also acted to improve its Y2K testing program. For example, it has more 
clearly defined its testing procedures for its contractors* and is using Y2K analysis tools 
to measure its testing thoroughness. In addition, HCFA has improved its test coverage 
(e.g., systems functionality, HCFA-mandated dates, interface coverage) of the external 
systems. In April 1 999, we reported that HCFA’s IV&V contractor had concerns with 
the documentation of external systems’ test coverage associated with Y2K testing to 
date,® HCFA issued instructions on April 9, 1999, that required each contractor to submit 
a traceability matrix that listed the business functions covered by the recertification tests. 


’ Part A claims are those submitted by hospitals, skilled nursing facilities, hospices, home health agencies, 
and rehabilitation agencies. Part B claims are those submitted by physicians, laboratories, durable medical 
equipment suppliers, outpatient providers, and other practitioners. 

® Between February 2, 1999 and September 22, 1999, HCFA issued 19 updates to its recertification 
instructions to more clearly define its testing procedures. 

’ GAO/T-AIMD-99-ieO, April 27, 1999. 
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Some HCFA contractors continue to improve their test coverage by adding test cases’^ to 
their traceability matrices. 

In addition, an independent testing contractor is conducting tests on the six standard 
systems and the CWF. HCFA also plans to perform end-to-end testing with its Year 
2000-compliant test sites. These end-to-end tests are to include all internal systems and 
contr^tor systems; however, they will not include testing with banks and providers. 

Another area in which HCFA has demonstrated progress is the development of its overall 
business continuity and contingency plan, which includes 29 internal plans. The agency 
established cross-organizational workgroups to develop contingency plans for the 
following core business functions: health plan and provider payment, eligibility and 
enrollment issues, progrmn integrity, managed care, quality of care, litigation, and 
telecommunications. HCFA’s fifth iteration of its overall business continuity and 
contingency plan (BCCP) was issued on July 1, 1999; the internal plans are currently 
being validated. 

As we have also reported, HCFA has taken comprehensive measures in conducting its 
outreach activities. * ' Outreach activities include information dissemination as well as 
presentations and conferences. For example, the HCFA Administrator sent out individual 
letters to over 1.1 million Medicare providers in January and May of this year, alerting 

A test case is a series of test scripts that identifies each testable condition of a system (including valid and 
invalid conditions), the associated inputs, and the expected results. 

' ’ Year 2000 Computing Crisis: Sta^s of Medicare Providers Unknown (GAO/AIMD-99-243, July 28, 
1999). 
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Shem to take prompt Y ear 2000 actioB on thw isfotmalion and billing systems. HCFA 
has also established a tolt-firee inforraation hotline and plans to film a four-part series in 
conjunction with the Health and Science television network that is to be broadcast to 
hospitais and jitB'shig facilities. In addition, asofiane 25, 1999, theagencyhadheld 12 . 
Year 2000 conferences tliioughout the country, and is planning to hold 10 more. Furtiier, 
HCFA has a web site dedicated to Year 2000 issues which contains information and 
advice to pwviders on how to assess readinc^, test systems, and devetop contingency • 
plans. 

KEY CHALLENGES RBMAIN IN TESTING 
MISSION-CRITICAL SY.«;TF.MS 

Although HCFA has improved its Y2K testing program, it stiil faces sevml hurdles to 
completing its recertification tests by November 1, 1999, With only 5 weeks remaining 
to complete these critical recertification tests, HCFA has much work ahead. 
Unfortunately, Otis tight schedule is not being guided by an overall plan because HCFA 
has not yet completed a detailed integrated testing plan, including a critical path. In 
addition to executing the recertification tests and resolving any errors that are discovered, 
HCFA is concurrently addressing other issues uncovered by Y2K assessmait tools. 
Further, HCFA is in the process of transitioning six contractors to new datacenters. Each 
of these overlying efforts introduces risks that could adversely tdfect thereceitificattiM 
testing of HCFA’s mission-crifical systems. 
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HCFA’s Recertification Testing Program fs Not Beinp Guided 
by An Integrated Testing Plan That Identifies the Critical Path 

In September 1998 we recommended that HCFA rank its remaining Y2K work on the 
basis of a schedule that included milestones for renovation and testing of all systems, and 
that it include time for end-to-end testing and identify the critical path.^^ Such a schedule 
is extremely important because of the number of systems, their complexity, and 
interdependencies among them. 

The required sequencing of the 75 external and 25 internal systems associated with the 
recertification requires an integrated testing schedule to avoid testing overlap and 
scheduling constraints. Since each contractor relies on the CWF and one of the six 
standard systems to process its claims, these systems should be completely tested before 
the contractors test their front-end and back-end processing systems with their respective 
standard systems. 

Given the limited time remaining, it is not possible for HCFA to conduct the 
recertification testing in the optimal sequence. Therefore, testing overlap is planned to 
occur — the 68 claims processing systems, 6 standard systems, and CWF are being 
concurrently tested. This testing approach is risky because it results in managing 
multiple testing baselines and creates challenges in ensuring that resolving one system’s 


‘^GAO/AIMD.98-284,&ptember28, 1998. 
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testing errors do not lead to problems in another system. For example, each of the 68 
contractors has tested with multiple versions of the CWF and their respective standard 
system that have been changed to address Y2K errors identified during the recertification 
testing.'^ HCFA officials acknowledge the added risk associated with this testing overlap 
of the CWF, standard systems, and contractor systems. 

Given that HCFA does not have enough time to conduct the recertification tests in the 
proper sequence, it must now aggressively manage the risks associated with the testing 
overlap. HCFA officials believe the risks are manageable due to their oversight of 
contractor Y2K efforts. However, effectively managing these risks calls for a more 
precise and focused effort; namely, an integrated testing schedule that defines individual 
system schedules and their interdependencies. Unfortunately, HCFA still does not have 
such a schedule. Although HCFA has a high-level integrated project plan that contains 
activities associated with its Y2K program, this plan does not identify individual system 
testing schedules or the interdependencies among all internal and external systems. In 
addition, it does not include the detail necessary to identify the critical path that would 
establish the sequence in which tasks must be completed to ensure that this complex 
undertaking can be finished on time. Such a critical path remains an essential tool that 
HCFA needs to have to manage risks. 


On September 24, 1999, HCFA officials told us that since the recertification testing began, the CWF has 
been changed three times and that each of the standard systems has also been changed. 
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HCFA Needs to Monitor Recertification Test Hxecution 

by Contractors and Address Y2K Errors Expeditiously 

In addition to the challenge posed by the many system interdependencies, HCFA is 
making progress in the individual recertification testing of each of the six standard 
systems and the CWF; however, this progress is uneven. For example, the MCS standard 
system contractor has executed 6,509 of its plaimed 6,734 recertification test scripts (97 
percent), while the CWF contractor has only executed 55,606 of its 11 2,4 18 planned test 
scripts (49 percent). Figure 1 shows the number of test scripts for each of the six 
standard systems planned to be completed by October 8, and those actually completed as 
ofAugustSl, 1999.''* 


'* In obtaining oommenls on a draft of this testimony, HCFA oflkials told us that they provided GAO with 
incofrect In&mmtkMi on the number of CWF plained reccftificatiofl test scripts as of Augit^3{, 1999. 
They added diat die correct number is 15,002 and that as ofSeptember 24, 1999, 14,S77 of these had been 
executed. a^ provided updated information on planned and executed test scripte fcH* fte six stendard 
systems. We did not present Ai$ updated information since HCFA officials were imabte to pmvidc 
suppon^g documrataricm rtor diey able to provide the number of failures widi diese 

ex^uted test scci^. 
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Figure 1 : Recertification Test Scripts Planned and Reported Executed for the Six 
Standard Systems as of August 31. 1999 ^^ 



APASS FISS GTEMS MCS UHC VMS 


I ED Planned Test Scripts 
BExecuted Test Scripts 


Standard Systems 


Source: HCFA. 


The executed test scripts as of August 31, 1999, for the six standard systems and the 
CWF have uncovered Y2K errors, as shown in Table 1 . 


The six standard systems consists of two Part A systems — Arkansas Part A Standard System (APASS) 
and Fiscal Intermediaries Standard System (FISS)— and four Part B systems — GTE Medicare System 
(GTEMS), Medicare Claims System (MCS), United Healthcare (UHC), and VIPS Medicare System 
(VMS). 
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Table i: Reported Failed Test Scripts for the Six Standard Systems and the CWF as of 
August 31. 1999 



APASS 

FISS 

GTEMS 

MCS 

UHC 

VMS 

CWF 

Priraitv 1 ,2 

3 

0 

0 

0 

12 

4 

0 

Priority 

3,4,5 

3 

3 

1 

28 

127 

1 

3,236 


Source: HCFA. 


As defined by HCFA, the priority 1 and 2 failures i^resent errors that would result in 
Y2K failures of the system. The priority 3, 4, and 5 errors represent lesser impacts, such 
as those for which there is either an alternative work-around, those that do not affect a 
required mission capability, or those that were rq)orted as an operator error that need to 
be retested. Because of the significance of the priority 1 and 2 failures, these not only 
require correction, but the systems changes to address them need to be retested to ensure 
that these changes do not introduce additional emors. Since the final recertification tests 
Will ultimately detemine whether HCFA’s mission-critical systems are Y2K compliant, 
it is essential that HCFA and its IV&V contractor closely monitor lest execution and the 
resolution of these errors. 

HCFA Needs to_Assgss Y2K Rcnov_ation Quality 
and.Test Coverage Using Automated Tools 

As an additional mechanism to ensure that mission-critical systems are free of Y2K 
errors and that ongoing rrajertification testing is adequate, HCFA is using Y2K analysis 
tools on each of the six standard systems and the CWF. These tools are to determine (1) 
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the Y2K readiness of the software code (i.e., Y2K renovation quality) and (2) the 
adequacy of test coverage. 

Preliminary results of the Y2K renovation quality tool reveal Y2K errors in the code. 

This tool identifies potential Y2K errors in three categories — (1) Y2K noncompliant 
errors, (2) suspect errors that may have a Y2K impact, and (3) warnings that have the 
potential for Y2K problems — that must be further analyzed to determine if indeed they 
are Y2K problems. For example, the FISS standard system had 775 noncompliant 
findings and 100 warnings identified by the renovation quality tool; but, according to 
HCFA officials, an analysis of the 875 potential problems found 49 actual Y2K 
problems, 2 of which required renovation. In addition, HCFA officials told us on 
September 24, 1999, that 7 updates to the VMS standard system have already occurred to 
address Y2K problems uncovered by the renovation quality tool. Figure 2 presents the 
preliminary results of executing the renovation quality tool for the six standard systems 
and the CWF. 
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Figure 2: Preliminary Results of the Renovation Oaalitv Tool for the Six Standard 
Systems and the CWF 
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Source: HCFA. 


Until this analysis is complete, the extent of programming errors that must be renovated 
and retested is unknown. Additionally, the utility of this tool is minimized if the analysis 
of the results is not completed quickly and any necessary changes are incorporated into 
the recertification testing program. On September 24, 1 999, HCFA officials told us that 
they have established an October 1 , 1 999, deadline for completing this analysis. 


Turning to the test coverage tools, results reveal some systems with low test coverage. 
HCFA uses two Y2K tools that assess lest coverage by identifying the total number of 
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date references tested.’^ The results of these tools are analyzed, and inadequate test 
coverage results are remedied by adding test cases. Figure 3 shows the percentage of the 
date references tested for each of the standard systems and the CWF.'^ 


Figure 3: Date References Tested for the Six Standard Systems and the CWF 



Source: HCFA. 


Of particular concern are the lower percentages for the GTEMS and, most importantly, 
the CWF, which is the heart of the Medicare Claims Processing System. To its credit, 
HCFA is asking these standard system contractors to improve their test coverage by 
adding test cases to the ongoing recertification tests. However, HCFA has 


Date references are the actual dates in the computer system. 

Due to time constraints, HCFA is not running the test coverage tool on all code associated with the six 
standard systems and the CWF. Rather, according to HCFA officials, it has decided to run the tool on just 
the eligibility and claims processing portions of these systems, since these are the critical software 
components for processing Medicare claims. 
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limited time to plan, execute, and analyze the results of additional test cases. Therefore, 
it should establish a deadline to accomplish each of these activities. 

HCFA Needs to Expedite Contractor Transitions to New Data Centers 

The recertification testing for 6 of the 68 contractors has recently been delayed due to the 
recent departure of a data center^* that had been providing service to these 6 contractors. 
These six contractors now have to be transferred to other data centers. Because these six 
transitions are scheduled to occur between mid-September and early November, these 
contractors will not be able to complete their recertification testing by November 1 . The 
six contractors intend to complete the recertification testing by December 1 , covering the 
two most immediate planned HCFA testing dates rather than all of the required four 
future date recertification tests.'^ HCFA needs to expedite the transitions to these new 
data centers and recertification testing associated with these six contractors because of the 
limited time available to address any schedule delays or problems identified in the 
recertification testing. 


HCFA has 23 data centers— large claims processing operations that operate one or more of the standard 
systems for one or more of the 68 conU'actors. A data center may also be a host site for the CWF. 

” HCFA’s recertification is to test four future dates — 12/31/1999 rollover to 1/4/2000, 2/27/2000 rollover 
to 3/2/2000, 9/30/2000, and 1 2/30/2000 rollover to 1/2/2001. 
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HCFA Needs to Minimize System Chances through March 3 1 . 2000 

As noted in our January 1 999 testimony, changes made to systems after they have been 
certified as Y2K compliant can introduce new Y2K problems.^^ To address this risk, we 
suggested that the Office of Managemait and Budget (0MB) consider directing agencies 
to adopt a strong change management policy — one that limits new software and systems 
changes. 

In response to our suggestion, in May, 0MB issued a memorandum to federal department 
heads stating the importance of considering the potential effect of changes to information 
technology systems on Y2K readiness, and urging agency heads to adopt a policy that 
only allows system changes where absolutely necessary. 0MB also requested that 
agency heads summarize in their quarterly Y2K progress reports how they would 
implement such guidance. 

HCFA has acted to implement OMB’s request. Specifically, HCFA reported on June 3, 
1999, that it implemented controls to minimize system changes after July 1. In addition, 
HHS reported in its August 1999 quarterly report to OMB that HCFA’s formal 
moratorium that halts systems changes to Y2K-certified systems is October 1, 1999, 
through March 31, 2000. HHS’ quarterly report also states that exceptions to the 


^ Year 2000 Comoirting Crisis: Readiness Improving. But Much Work Remains to Avoid Ma^or 
Disruptions rGAO/T-AlMD-99-SO. January 20, 1999). 
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moratorium may be allowed through a strict approval process. Such an exception is 
HCFA’s planned October 1999 and January 2000 provider payment updates. In April, 
we reported that these updates contribute to HCFA’s already monumental testing 
challenge. However, HCFA officials told us that these updates are minor and that they 
do not expect them to impede the recertification testing program. 

OTHER CRITICAL RISKS AND CHALLENGES REMAIN 

In addition to the challenges associated with its recertification testing, HCFA must also 
address three other critical areas. First, contractor progress in testing with providers has 
been limited. Second, many managed care organizations (MCOs) have outstanding 
issues to address in order to become y2K compliant. Finally, HCFA needs to complete 
and validate internal, contractor, and MCO business continuity and contingency plans. 

HCFA Needs to Monitor Provider Testing with Contractor.s 

In addition to individual systems testing, HCFA must also test its systems end-to-end to 
verify that defined sets of interrelated systems, which collectively support an 
organizational core business function, will work as intended. Since providers submit 
Medicare claims through claims processing contractors, HCFA has tasked these 
contractors to future date test with their respective providers and encouraged providers to 
take advantage of the opportunity to future date test with contractors. In March 1999, 
HCFA required all Medicare contractors to establish a test environment that would allow 
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Medicare claims from providers and submitters^’ to be validated in a future date 
environment. In May 1999, HCFA further defined this requirement by establishing a 
goal for contractors to future date test with providers that represent at least 50 percent of 
the annual claims volume. 

In July, we reported that contractor testing with providers/submitters had b^n limited 
and testing that had occurred had identified problems.^^ Specifically, as of June 21, 1999, 
38 of 68 contractors had not initiated any testing with their respective providers. Of the 
remaining 30, only 1 had tested with more than 1 percent of its respective providers. We 
also reported that, according to HCFA’s web site, the one Medicare contractor that 
completed substantial testing of 434 providei^ encountered initial problems with 123 (28 
percent); 9 of these were critical failures that produced dates of 1900 and 1901 during the 
testing process. We also reported that contractor/provider testing only identifies 
problems with data exchanges. Accordingly, it does not address whether providers’ 
systems that process Medicare claims are Y2K compliant. 

HCFA’s latest information on contractor/provider testing continues to be discouraging. 

As of September 21, 1999, HCFA’s data showed that of 75 contractors, 69 have initiated 
testing with their respective providers.^^ However, HCFA reports that 40 of the 69 
contractors have tested with less than 1 percent of their providers. Table 2 shows the 


Submitters are third-party billers or clearinghouses that bill for providers. 

^ GAO/AIMD-99-243, July 28, 1999. 

HCFA’s most recent data on conttactor/provider testing lists 75 instead of 68 claims processing 
contractors, because HCFA tracks this testing by identification number and some contractors have been 
assigned more than 1 identification number. 
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percentage of providers that have future date tested with each of the 69 contractors. 


Table 2: Contractor/Provider Testing Status as of September 21. 1999 


Number of 
Contractors 

Providers That Have 
Tested With 
Contractors 

40 

Less than 1 % 

22 

1 to 4 % 

6 

6 to 12% 

1 

100 % 

Total 69 



Source: HCFA. 


HCFA also continues to report that Y2K failures are occurring during provider/contractor 
testing. On September 22, HCFA’s chief information officer reported that 10 to 20 
percent of the providers/submitters who have tested with contractors have experienced 
failures due to incorrect claim dates. These failures were attributed to provider hardware 
and software problems. Concerning HCFA’s goal to test with providers/submitters who 
represent 50 percent of their total claims volume, HCFA reports that only 9 contractors 
have met this goal as of September 20, 1 999. 

HCFA and the President’s Council on Y2K Convereion also have concerns about 
providers’ Y2K readiness. HCFA officials told us that, despite their outreach efforts to 
the provider community, providers are reluctant to test with Medicare contractors. The 
President’s Council on Y2K Conversion, established in February 1998 to, among other 
things, increase awareness of and gain cooperation in addressing the Year 2000 problem 
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in various economic sectors, also recently highlighted concerns about the compliance 
status of health care provider record keeping and billing systems. The Council reported 
last month that Y2K failures in these billing and record keeping systems, if not promptly 
addressed, could interfere with normal payment processes and force smaller, cash- 
strapped providers to suspend operations.^^ 

Until these data exchanges between providers and contractors are future date tested, the 
ability of these entities to process Medicare claims in a future date environment is 
unknown. Therefore, it is essential that HCFA continue to monitor and publicize 
provider testing with contractors and establish milestones for contractors to test with 
providers. 

HCFA Needs to Ensure that Manaaed Care Organizations 
Are Y2K Compliant 

In addition to fee-for-service contractors, 6.9 million of Medicare’s 39 million 
beneficiaries are currently enrolled in 383 MCOs. In January 1999, HCFA required that 
by April 15, 1999, the MCOs certify their systems as Year 2000 compliant. We testified 
in April that HCFA had received certifications from 315 MCOs and that, similar to the 
claims processing contractors, 271 of the 315 contained qualifications (exceptions).^^ 


I1ie_President’s Council on Year 2000 Conversion: Third Summary of Assessment Informarion. August 
5, 1999. 

GAO/T-AIMD-99-160, April 27, 1999. 
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HCFA’s most recent data on these certifications continue to be of concern. HCFA had 
received certifications from 425 MCOs,“ and reported that as of June 1999, 365 of the 
425 certification statements contained qualifications (86 percent) and that only 4 were 
Y2K compliant. The President’s Council on Year 20(X) Conversion also recently 
highlighted concerns about the Y2K readiness of MCOs. The Council reported in August 
that serious concerns exist with MCOs that either started late in addressing the problem 
or have yet to take significant steps toward achieving full Year 2000 readiness.^’ 

To focus the limited remaining time on the higher risk MCOs, HCFA, with assistance 
from a contractor, performed a risk assessment of each of the 425 MCOs using the 
certification statements and the associated qualifications, along with other criteria.^* 
HCFA’s June 1999 risk assessment concluded that 

• 94 MCOs are high risk (22 percent), 

• 314 MCOs are medium risk (74 percent), and 

• 1 7 MCOs are low risk (4 percent). 


Since July 1999, the number ofMCOs decreased from 425 to 383, because 52 left the Medicare program 
while 10 new MCOs joined. 

^ The President's Council on Year 2000 Conversion: Third Summary of A.ssessruent Information . August 
5. 1999. 

The other criteria were size, tax status, corporate experience, sole MCO in region, data exchanges. Year 
2000 risk assessment, contingency planning, independent verification and validation, monitoring of results, 
centralized management, delegation, stability, and system compliance. 
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To ensure that reported qualificaticms are being addressed and that these MCOs are 
adequately addressing their Year 2000 challenges, HCFA is conducting site visits 
covering 1 84 MCOs, which includes the 94 high-risk MCOs. According to HCFA, the 
1 84 serve about 90 percent of the 6.9 million MCO Medicare beneficiary population. 
HCFA officials told us that they are using the self-reported results of a Medicare Y2K 
survey by the HHS Office of the Inspector General to follow up on the status of the 
MCOs not covered in the site visits. The Inspector General survey results are expected to 
be released by the end of this month. 

Although HCFA’s “risk-approach” to determining the Y2K status of MCOs has been 
useful, it is essential that HCFA now focus on the resolution of reported qualifications 
and whether each of the MCOs is Y2K compliant. On January 25, 1999, HCFA 
instructed MCOs that a formal recertification would be required later in 1999; however, 
HCFA officials now tell us they have decided that a formal recertification will not be 
required. Without such a recertification, risks are enhanced that MCOs will experience 
Y2K-related disruptions. Accordingly, we believe that HCFA should reconsider this 
decision. As part of our ongoing work for the Senate Special Committee on Aging, we 
plan to review the resolution of the qualifications associated with MCO certifications and 
HCFA’s follow up actions to determine whether each MCO is Y21C compliant. 
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HCFA Needs to Complete and Validate Internal. Contractor. 
and MCO Business Continuity and Contingency Plans 

Given the magnitude of the many challenges that HCFA continues to face, the 
development of business continuity and contingency plans (BCCPs) to ensure continuity 
of critical operations and business processes is essential. HCFA continues to make 
steady progress on its ageneywide and 29 internal BCCPs; however, the status of 
contractor plans is unknown, and the results of HCFA’s initial review of MCO plans are 
not promising. 

HCFA has completed ite agencywide BCCP that includes 29 internal plans; however, 
essential validation activities remain. As of September 2, 1999, HCFA reported that they 
had procedurally validated 25 of these 29 plans.^^ Of the remaining four plans, it plans to 
procedurally validate 3 of them. The remaining BCCP — Medicare contractor 
management — does not require validation because it is currently being used to guide 
contractor transitions, according to agency officials. In addition to the procedural 
validations, HCFA reports that 1 1 of the internal plans require additional validation 
through extensive simulation and/or operational reviews.^® It is unclear when these more 
detailed validations will be completed since HCFA has missed its latest milestone of 
August 30, 1999, to validate BCCPs and has not yet established a new deadline. Such 


According to HCFA, iM-ocedoral validation consists of emergency response team members reviewing the 
BCCP to confimi basic procedures and discussing responsibilities for difterent failure scenarios to ensure 
adequate staffing. 

According to HCFA, simulation consists of emergency response team role playing from alternate 
facilities with minimal test scripts, while operational validation is used to evaluate the most complex and 
critical BCCPs under full or partial operating conditions using detailed scripts. 
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validation activities are essential to ensuring that BCCPs can be executed in the event of 
Y2K-indueed failures. 

The status of Medicare contractor BCCPs is unknown. In May 1999, HCFA reviewed 
77^‘ contractor plans and concluded that 17 of these required major improvement. 
However, HCFA’s BCCP technical support contractor stated that not all Medicare 
contractors have specified detailed procedures that are required for executing and testing 
BCCPs. Our assessment of these plans is consistent with the technical support 
contractor^HCFA does not yet have the detailed plans from most contractors. 

To address this situation, HCFA issued a memorandum on August 6, 1999, instructing 
Medicare contractors to have available detailed BCCPs for HCFA review by Sqrtember 
30. HCFA plans to review these at each of the contractor’s site using agency Y2K 
contractor oversight teams. To prepare these teams for this review, HCFA’s technical 
assistance contractor recently provided training to them, along with checklists, that will 
be used to assess the adequacy of Medicare contractor BCCPs. On September 24, 1999, 
HCFA officials told us that these assessments are to be completed by October 30, 1999. 
We remain concerned about the late completion dates associated with these plans and 
whether there will be sufficient time remaining to test them. 

The status of MCO BCCPs is likewise not encouraging. HCFA required MCOs 
participating in the Medicare program to submit their plans to HCFA by July 15, 1999. 


Some contractors submitted more than one BCCP. 
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As of September 2, 1 999, HCFA had received BCCPs covering 3 1 0 of the 383 MCOs. 
HCFA’s review of these 310 concluded that 69 percent of them need major improvement, 
1 8 percent need minor improvement, and 13 were reasonable. 

HCFA has been active in following up on the MCO BCCPs. For example, it mailed 
letters to each of the 73 that have not yet submitted plans. In addition, it sent 
letters to those MCOs with plan deficiencies and has requested that those plans in the 
“needs major improvement” category be resubmitted by September 28. In addition, 
HCFA has held three workshops-in Los Angeles, Denver, and Atlanta--to assist MCOs 
in developing BCCPs. HCFA officials told us they have requested that the MCOs 
validate their plans by the end of November, but they could not provide documentation to 
us to substantiate this request. 

Limited time remains to complete and validate all BCCPs. Therefore, it is essential that 
HCFA sustain its efforts to validate all internal plans and closely monitor the completion 
and validation of contractor and MCO plans. 


In summary, HCFA and its contractors have made progress in addressing Medicare Y2K 
issues. However, until HCFA completes the ongoing recertification tests, the final status 
of the agency’s Y2K compliance will remain unknown. Limited time remains to 
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completely test all systems that process Medicare claims for Y2K compliance (internal, 
fee-for-service contractor, managed care organization, and provider). Nevertheless, 
HCFA must sustain its efforts, because any progress made in testing these many systems 
lowers the risk of disruptions to Medicare and the claims payment process. HCFA must 
also continue to closely monitor contractor testing with providers that to date has been 
limited but has uncovered Y2K problems. In addition, HCFA needs to continue its 
efforts to ensure that MCOs are adequately addressing their Y2K challenges. Given the 
considerable amount of work that remains in the next few months, it is crucial that the 
development and testing of internal, contractor, and MCO business continuity and 
contingency plans move forward rapidly to ensure that, no matter what, providers will be 
paid and beneficiaries will receive care. This concludes my statement, and I would be 
pleased to re^ond to any questions at this time. 


Contact and Acknowledgments 

For information about this testimony, please contact Joel Willemssen at (202) 512-6253 
or by e-mail at willemsseni.aimd@gao.gov . Individuals making key contributions to this 
testimony included Dr. Nabajyoti Barkakati, Christina Bower, Mary Dorsey, Dr. Robert 
Norris, and Dave Powner. 
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Mr. Horn. We now go to the principal witness from the Health 
Care Financing Administration, which is the Chief Information Of- 
ficer Gary Christoph. Dr. Christoph. 

STATEMENT OF GARY CHRISTOPH, PH.D., CHIEF INFORMA- 
TION OFFICER, HEALTH CARE FINANCING ADMINISTRATION 

Dr. Christoph. Chairman Horn, Chairwoman Morelia and Con- 
gressman Turner, thank you for inviting me here today to discuss 
the Health Care Financing Administration progress on meeting the 
year 2000 challenge. I’m happy to report to you that we continue 
to make solid progress. 

We have continued our aggressive Y2K activities since we last 
came before Chairman Horn’s committee this past April, and we 
are on track toward meeting this challenge successfully. All of our 
internal systems have been renovated, fully tested, certified compli- 
ant and implemented. All of our external claims processing sys- 
tems, those at our contractors, have been fully tested, including fu- 
ture date testing and integrated testing and certified as compliant; 
and all of these systems are in production and are processing Medi- 
care claims today. 

We’ve taken the advice of Congress to heart and have worked 
diligently with the GAO to achieve our mutual goal that Medicare 
function into the new millennium with minimal disruption due to 
Y2K. For all of us in the health care industry, the year 2000 chal- 
lenge is more than a business and technical issue. It is a patient 
care issue. As the GAO has reported, provider readiness surveys 
have had very low response rates and consist of self-reported status 
information that we suspect of being overly optimistic. 

We continue to have serious concerns about the readiness of 
Medicare providers. We have made extraordinary efforts to reach 
out to providers and to raise awareness about what they must do 
to meet their responsibility. We are sponsoring hundreds of con- 
ferences, learning sessions, and lectures throughout the country, 
and we meet regularly with the health care sector trade groups to 
raise awareness. 

We have established a Y2K website, a toll-free line to provide up- 
to-date information on a wide range of issues, and we have made 
other steps to help readiness. 

We are encouraging providers to test future-dated claims with 
our claims processing contractors. 

Despite these unprecedented efforts, too few providers are taking 
advantage of the opportunity we’ve created for them to test with 
us. We’re doing all we can to ensure that our systems will work 
and that providers will get paid. That’s the best way to ensure that 
beneficiaries continue to get care, and we’ve pulled out all the stops 
to encourage providers to get ready, too, but it is frustrating that 
they are still not willing or able to test with us. 

In fact, less than 2 percent of claim submitters have tested with 
our contractors. Of those that have tested, 10 to 20 percent have 
found errors. Those that have found problems have been able to 
correct them. That’s the purpose of the testing. That’s the good 
news. 

We remain deeply concerned, however, about those who have not 
tested at all. If they have not tested, it is unlikely if they know 
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whether or not their systems will work. We are doing all we can 
to raise providers awareness, and we are very open to your advice 
and suggestions on how hest to reach them in the limited time that 
remains. 

We at HCFA have and continue to do a great deal of testing and 
retesting to ensure that our own systems will continue operating 
come January 1st, 2000. We continue to refine and validate our 
contingency plans which were developed using GAO guidance to 
prepare for any unforeseen glitches. We’ve actually exercised some 
parts of our plans successfully during Hurricane Floyd several 
weeks ago. We have also required our claim processing contractors 
to have appropriate and validated contingency plans, and we’re 
carefully reviewing those plans, as GAO has recommended. And we 
continue to help health care, managed care organizations and State 
Medicaid plans and the health community at large to develop and 
refine their contingency plans. 

We have had a lot of help with our Y2K effort. We appreciate 
and have greatly benefited from the advice of our independent vali- 
dation and verification contractor, AverStar, as well as advice from 
the Health and Human Services Inspector General and the General 
Accounting Office. And we certainly would not have made the 
progress we have without the support and funding that has been 
provided to us by you. Congress. I am confident that our systems 
will be ready to process and pay claims at the turn of the century. 
We will continue to do all we can to reach out to providers and to 
share information and assistance. 

Again, I thank you for your attention to this essential issue. 
Thank you, Mr. Chairman. 

Mr. Horn. Thank you very much. 

[The prepared statement of Dr. Christoph follows:] 
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Testimony of 

GARY CHRISTOPH, Fh.D., CHIEF INFORMATION OFFICER 
HEALTH CARE FINANCING ADMINISTRATION 
on HCFA Y2K PROGRESS before the 
HOUSE COMMITTEE ON GOVERNMENT REFORM 
SUBCOMMITTEE ON GOVERNMENT MANAGEMENT, 
INFORMATION, & TECHNOLOGY 
end 

HOUSE COMMITTEE ON SCIENCE 
SUBCOMMITTEE ON TECHNOLOGY 
September 27, 1999 

Chairman Horn, Chairwoman Morelia, Congressman Turner, Congressman Barcia, distinguished 
Subcommittee members thank you for inviting me here today to discuss the Health Care Financing 
Administration’s (HCFA) progress in meeting the Year 2000 (Y2K) challenge. I am happy to 
report today that HCFA continues to make solid progress. 

Y2K remains our Agency’s top priority, and we are on track to meeting the Year 2000 challenge 
successfully. We have continued our aggressive Year 2000 activities since we last came before 
the Government Management, Information, & Technology Subcommittee this past April. Our 
success is due in large part to the leadership of these Committees and Congress, as well as to the 
commitment and dedication of our Administrator, Nancy- Ann DeParle. Clearly, we would not 'ne 
where we are today without the help and resources you have provided. 

My testimony today will focus on two main issues. First, where we are in our Year 2000 effort 
and second, where we see the greatest risk to our programs, which comes from areas outside our 
direct control, namely the uncertain readiness of Medicare providers. 

Medicare Systems Readiness 

As we reported last April, all of HCFA’s internal systems were renovated, fidly tested, certified 
compliant, and implemented by the government-wide Year 2000 goal of March 3 1, 1999. This 
includes the systems that manage the eligibility, enrollment, and premium infirrmation of Medicare 
benefidanes, and those that make payments to managed care organizations that contract with 
HCFA In addition, all of the external claims processing systems, those operated by private 
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insurance contractors that process Medicare fee-for service ciaims and pay biUs, have been fiiUy- 
tested, including &ture-date tested, and eertiSed as compliant. All of these systems are in 
production and are processing and paying Medicare claims today. Our independent verification 
and validation (IV&V) contractor, with oversight fi-om the Department’s Inspector General, has 
veriSei the readiness of these external systems. Last April, you urged usiand the GAO to work 
together to acldeve our common goal of having Medicare continue to fiinction with minimal 
disruption beeause of Year 2000 issues. We have taken your advice to heart rad have woriced 
diligently with the GAO to assure that Medicare’s core business activities will continue to operate 
effectively into file new miUemiium. We appreciate the General Acimuisting Office’s (GAO) 
continuing oversight of our efforts; they have provided us with vatuable independem perspective. 

The GAO has highfighted several areas where we could improve our efforts and we are acting on 
each of them. For example, we are using software tools to improve our test coverage and 
execution. We have imposed a moratorium on system changes throu^ March 31, 2000. We 
have begun monitoring provider testing of electronic claims submissions. We have increased our 
effiirts to detennine the readiness status of Medicare managed care oiganiutions (MCOs). We 
are successfully managing contractor and data center transitions. And we contimie to pay close 
attration to Medicare contractor and MCO business continuity and contingency plans. 

Tfitmg 

We have developed rad implemented a process for performing Year 2000 renovations, 
certification testing, and vafidation which ensures our work is of the highest quality and that our 
systems will be Year 2000-ready by January 1, 2000. Our IV&V contractor. AverStar, has 
characterized some of the steps we have developed as “b«t practices” that they have 
recommended to their other Year 2000 customers. 


We have dosciy followed and even exceeded the GAO’s recommendations in the design and 
performance of our testing r^men. These activities have inchided; 

» Unit testing to provide evidence that the smallest defined feature of a particular piece of 
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software works as it was intended. 

■- Integration testing to veiiiy that various units of software, when combined with other 
units, work together as expected. 

> End-to-end testing to ensure that a defined set of interrelated systems, which collectively 
support HCFA-controUed core business functions, work in combination as intended in a 
fttlly operational environment. This includes integrated testing of contractor systems with 
the Conunon Working File (CWF). 

> Employing validation tools to certify the quality of code renovation. 

> Future-date testing of all Medicare fee-for-service systems in a future-date environment. 

> Independent testing of Medicare contractors' standard systems. 

We are now completing recertification testing to re-verify that our systems are working and that 
software changes made this past summer to fulfill legislative mandates and improve program 
operations have not affected previously achieved Year 2000 compliance. Tins recertification 
testing is being done on all of our external systems and those internal systems that have undergone 
any significant change. We will complete our recertifications by November. These extensive tests 
will provide further assurance that all of our systems will function in the new millennium so that 
there will be no disruption in payments to providers. 

Acting on the advice of the GAO and using what we learned in our first round of testing and 
recertification, our recertification testing surpasses our previous tests in both its sophistication and 
scope. I am convinced that our systems will be ready for the mUletmium and, frankly, believe that 
our testing has put our systems in better shape than ever before. Our IV&V contractor is 
working closely whh us on our recertification eSbrt. We are taking steps to quickly address any 
concerns highlighted by their evalrrations. Their independent reviews are central to our 
recertification effort and provide us with a key Year 2000 management tool to help us better 
target our resources in the limited time remaining. 
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CoBtiBgency ami Day ttee nanniiig 

Risk nitigatioii is essential to our Year 2000 contii^eiwy planning e^rt, wbich we have laigdy 
basmi on the GAO publiahml guidance on contingency planning. WhUe we bdieve the ride of 
Year 2000 &ilures of our systenis is low, we are working di%ently to prepare for airy potential 
failures. Fdlewing the GAO’s recommmidatioBS, we assembled our own handbook on 
eoMng^i? planniog and made it avaiUbie to our coatnciois, mtes, managed cate oigamzatioiis. 
and the provider community. This handbook goes beyond the GAO's recommendation for the 
levd of detail meesssiy Sir aiccesifiil contingency planning. We airi our clahiK processing 
contractmsheve adhered to our more strii^ent standards, and we have urged states and Medicare 
MCOs to fbiiow them as w^. 

We are now in the vdidarion phme of our own internal contmgency planning process. Each 
cootin^ncy plan has a itesignated Emergency Response Team responsible fat exeeulir^ the 
various (dans, if necesaaiy. During the vafidalion phase, these teams are ninning practice 
exercises and rehearsing plans in a simulated atvi fo n i ne nt . 

We have required that our claims processing comractora have afgirapriate and vahdated 
contingency plans in place. We are carefully reviewing these contingency plans on-site at the 
contractors and have invited the GAO to aceompany us on these visits. And we coniiisie to asntt 
our partners, including managed care organizations, state Medicaid plans, and the health care 
provider community at large, as they devebp and validate their own contingency plans. 

As part of our overall preparedness strategy, ws have in ^aee our new command and control 
SDucture to proaciivety assess the status of aO our systems and paitners during the inllennium 

transition, and, as necessary, guide our reaction and man^ement of any unforseen Year 2000 
evems. This new structure permits us to track the status of our health care programs; o^nizes 
our dedaon-making processes for identifying and tesolving problems so as to better recognize 
tr^ger evems; and reports on the status of all of our programs, iadudiag misaon-criticai system 
operations and business continui^ funciiens. 
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While these Day One and contingency plans are important risk mitigation efforts, we have already 
passed signiltcant Year 2000 milestones which provide real-time evidence that our remediation 
efforts have been successful and that our systems can function in an actual Year 2000 
environment. In August, we successfully received and processed enrollments &om the Social 
Security Administration for beneficiaries who will be newly entitled to Medicare on January 1, 
2000 . 

Outreach 

We now see our greatest risk to the program as the uncertainties in the readiness of our partners, 
namely, our Medicare providers. As the GAO has noted, virtually all of the surveys of provider 
readiness have fairly low response rates, and the anonymous responses are self-reported data, 
which may be overly optimistic. While we suspect that larger organizations are in better shape, 
we are concerned about the readiness of individual providers in rural and inner-city institutions. 
Accordingly, our biggest risk mitigation effort is an unprecedented outreach campaign to health 
care providers and their trade associations to raise awareness of the need to make Year 2000 
systems changes. We continue to have serious, ongoing concerns about the ability of some 
Medicare providers to successfully meet this challenge. To address these concerns and to 
encourage providers to renovate and test their systems, we have engaged in an unprecedented 
series of outreach activities, including: 

> Sending two separate mailings to each of our more than 1 . 1 million Medicare providers 
and health plans stressing the importance of Year 2000 readiness, including the need to 
assess readiness, test systems, and develop business continuity and contingency plans. 

' Sponsoring full-day conferences and half-day public learning sessions for health care 

providers in every state urging assessment, remediation, claims testing, and contingency 
planning. 

> Participating in the production of a Year 2000 Health Network satdlite broadcast and 
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Audio Digest taping for distribution in contimiing education materials to physicians 
nationwide. 

Distributing over 1,800 CD-rom based Year 2000 "Jump Start Kits” to health care 
providers. These kits assist small businesses in assessing their areas of Year 2000 risk and 
formulating contingency plans. 

Developing a “Year 2000 Outreach Survival Kit” for Medicare contractors, which 
includes lact sheets, talking points, web resources, and a provider inventory checklist. 

Creating a website dedicated to the Year 2000 (www.hcfa.gov/y2k) advising providers 
with up-to-date information on how to identify mission-critical hardware attd software and 
assess its readiness; test systems and their interfaces; and develop contingency plans 
should unexpected problems arise. The website includes links to other relevant sites, such 
as the Food and Drug Administration's website on medical device readiness. 

Establishing a Year 2000 toll-free phone line, l-800-9Sg-HCFA (1-800-958-4232) where 
providers can recdve current information and answers to Year 2000 questions that relate 
to meilical supplies, their own fyeilities and business operations, and, if necessary, referrals 
for more specific billing-related information. The hotline also updates callers on HCFA’s 
Year 2000 policies and provides general "how to" assistance to help callers prepare their 
own computer systems for the millennium. 

Hosting a number of Year 2000 seminars and provider educational conferences in cities 
across the country to provide atterulees with insights about what doctors' offices, 
hospitals, equipment suppliers, phatmacies, and other health cate providers, and tfacir 
billing agents need to do to be Year 2000-ready, including readiness strategies as well as 
information about biomedical equipment and pbaimaceutical risks. 
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► Working in consultation with rural provider associations to hold smaller more 
individualized Year 2000 educational sessions targeted towards rural providers. 

Participating in and sponsoring hundreds of conferences, symposiums, and outreach 
programs throu^ our own Year 2000 speakers bureau. 

» And working with Congress to encourage providers to understand the importance of the 
Year 2000 issue. 

Despite these unprecedented eiEforts, we remain deeply concerned that many providers still do not 
appear to be doing all that they must to prepare foT the Year 2000. As the millennium deadline 
approaches, we are, therefore, refining and re^targeting our outreach toward those provider 
groups we and' others have identified as needing the most attention. And we are interested in 
woddng with the Congress and pursuing any ideas you might have as to how best to reach these 
prowders. 

As part of this re^targeted effort, we are placing special emphasis on reaching out to the larger 
billing companies and clearinghouses that many of our provider partners use to submit Medicare 
claims to our claims processing contractors. We want to encourage these larger companies to test 
their ability to submit Year 2000-campliant claims to their contraaors to ensure through testing 
that their remediation efforts have been successful. 

Last Wednesday, here in Washington, we co-sponsored an all-day summit specifically designed 
for billing cioringhouses, third-party biUing services, practice management companies, software 
vendors, and other claims processors. Hie summit provided infonnation on the mission critical 
steps these partners need to take to continue processing claims successfully in the new 
millennium, as well as up-to-date information on best practices ftom individuals in the field, 
including claims processing contractors, biUing sovice providers, and others. 
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Also, as part of our outreach strategy, we eontinue to strongly enooiurs^e heith care providers to 
test future-dated claims with our claims processing contractors. Such testing will assist them in 
detratnining whethar they can successfully generate and submit liiture-dMed claims to our 
contractors. Too few providers are taking advantage of the opportunity to submit test claims to 
our contractors. This typifies our concern; If submitters have not tested with us, it is likely they 
have not tested with other payers. If providers do not test, then they really do not know whether 
their claim ^bmi^mi wUl work. We are redoubling our efforts to encourage ail of our partners 
and their billing a^nts to test their systems and ensure they will function in the new miliennium. 

Managed Care 

We have been workii^ diligmitly to address the Year 2000 readiness of Medicare managed care 
organizations (MCOs) as well. While our own internal systems for paying MCOs are compKant, 
we remain concerned about some MCOs’ preparation for the Year 2000. We required all 
Medicare MCOs to certify to us that their systems will perfijrm into the new millennium. We also 
required the Medicare MCOs to provide us with their contingency plans and we are reviewing 
those plans. Approximately two-thirds of the plans we have reviewed needed improvement. Our 
review of the contingency plans for national chains indicates that SO percent are reason^le or in 
need of minor improvement, while the other 50 percent need major improvement. 

We have required those MCOs whose plans need improvement to resubmit revised contingency 
plans to us. To assist MCOs in improving their plans, HCFA hosted three technical assistance 
workshops in Los Angeles, Denver, aiul Atlanta to provide guidance on contingency planning 
principles, as wdi as to respond to particular concerns. Through these workshops and other 
communications, we have endeavored to assist those MCOs with less-than-adequate plans in 
revising and strengthening their plans. And we wiB continue to monitor the progress of MCOs, 
pmilig particular attention to MCOs’ contingency plan testing, for the remainder of the year. 
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Medicaid 

We also have been working closely with otn' nation’s Governors and state Medicaid Directors to 
ensure that state Medicad agencies are ready for the Year 2000. We have undertaken an 
extensive e&it to assess the Year 2000 readiness of state Medicaid agencies as well as provide 
technical assistance on compliance protocols, testing, contingency planning strategies, and best 
practice information. We haw taken the extra step of hiring expert consultants who, throi^h site 
visits, ate assessing states’ progress against their own goals and standards in becoming Year 2000 
compliant, as well as providing detailed feedback and technical support. We have conducted site 
visits to every stale and the District of Columbia and are continuing to assist those that are having 
particular diScuities, inetuding providing technical support in developing and evaluating their 
contingency plans where needed. Based on observations obtained through our site visits, states 
have made substantial progress. 

CondniioD 

We have made remarkable progress is preparing our systems, the ones over which we have 
authority and can exert control, for the new millennium. We are continuing to test our systems 
and refine our contingency plans. We continue to rely on IV&V and to work whh the GAO to 
continually improve our eCTectiveness and readiness. We remain concerned, however, about the 
progress of some Medicare providers in successfully meeting this challenge. We are committed to 
continuing our unprecedented efforts to reach out to these panners, share information, and 
provide technical assistance. We appreciate the support and attention of Congress and the GAO 
in this important endeavor. Again, I thank you for your attention to this essential issue, and I am 
happy to answer any questions you may have. 

# # # 
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Mr. Horn. We now have the president of the American College 
of Physicians and the American Society of Internal Medicine, Dr. 
Whitney W. Addington. Dr. Addington. 

STATEMENT OF WHITNEY W. ADDINGTON, M.D., PRESIDENT, 

AMERICAN COLLEGE OF PHYSICIANS, AMERICAN SOCIETY 

OF INTERNAL MEDICINE 

Dr. Addington. Thank you and good afternoon. 

I am Dr. Whitney Addington. I am an internist and 
pulmonologist in Chicago and president of the American College of 
Physicians American Society of Internal Medicine. The college is 
the Nation’s largest medical specialty organization. Many of the 
more than 115,000 members of the college are involved in internal 
medicine practices in which they constantly rely on computer tech- 
nology which provides invaluable assistance in the provision of pa- 
tient care, as well as in the administrative aspects of running their 
medical practice. You are to be commended for the subcommittee’s 
ongoing focus on the serious challenges posed by Y2K readiness 
issues. 

ACP-ASIM was quick to recognize the threat posed by Y2K. Un- 
less our members addressed it, we knew it could disrupt their prac- 
tice operations and thereby impede delivery of vital health care 
services to their patients. As early as March 1998, our monthly 
newsletter ran a full-length article posing the question, “Is your 
practice prepared for the millennium bug?” 

Early in 1999, the college mobilized a college-wide information 
campaign to alert, inform and assist our membership in addressing 
the Y2K threat. Articles appeared in most of this year’s issues. The 
topic has been further publicized through our State chapters. 

ACP-ASIM’s Center for a Competitive Advantage created a spe- 
cial Y2K webpage on our own website, www.acponline.org, and 
published a Y2K Tool Kit to give members detailed, practical infor- 
mation and guidance on how to address the issue. 

This is the Y2K Tool Kit that has been given to our members, 
and I have included a copy, together with my testimony, and would 
respectfully request that it be included in the record of this hear- 
ing. 

Mr. Horn. Without objection, it is so ordered at this point in the 
hearing. 

Dr. Addington. Thank you. 

[The Y2K Tool Kit follows:] 
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Introduction - How to Use This Toolkit 

Y2K Basic Information, Strategy, and Resources Tab 1 

Immediate Actions To Take Tab 2 

Medical Practice Computer System Compliance Tab 3 

Medical Devices Compliance Tab 4 

Support Systems and Outside Vendors Compliance Tab 5 

Selecting A Software System Information Packet Tab 6 
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How to use this Toolkit 


This guide provides information and. resources for addressing each of the major problem 
areas of the Year 2000 computer problem (Y2K). 

However, time is now running out. Priorities must be set and immediate action taken. 

To use this guide efficiently, go first to Tab .1 {Y2K Basic Information, Strategy, and 
Resources); read at least the "basic strategy" and whatever other information meets your 
needs. Then go to Tab 2 (Immediate Actions To Take), which will get you started and 
lead to the other three topics (Compliance for medical practice computer systems, 
medical devices and support systems or outside vendors) as appropriate. If you 
determine that your computer system can not become Y2K. compliant, you will be 
directed to Tab 6 to immediately begin looking for a new computer system. 


*Please Note 

While the guidance presented in this guide was carefully chosen to assist 
our members in dealing with the Y2K problem, ACP-ASIM assumes no 
legal responsibility for decisions made by medical practices based on 
this information. 



Y2K BASIC INFORMATION, STRATEGY, 
AND RESOURCES 
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Basic Information, Strategy, and Resources 


1-1 What is the Year 2000 problem? 

1 -2 A basic strategy for addressing the Y2K problwn 


Background Articles 

i - 4 “Will the Y2K bug force you to replace your computer?” 

ACP-ASIM Observer, March 1999 

1-7 “Is your practice prepared for Y2K?” 

ACP-ASIM Observer, April 1999 

1- 17 “Biomedical Equipment Crisis in the Year 2000" 

Armais of Internal Medicine November 15, 199S 

1-18 “Is your practice prepared for the millennium bug?” 

ACP-ASIM Observer, May 1998 

Web Links and Other Resources 

• HCFA toll-free Y2K telephone line; (800) 958-4232 

niis Telephone number will connect you with a HCFA Y2K expert and answer y2K 
questions regarding medical supplies. Medicare billing and other issues. 

• HCFA Y2K Webpage - www.hcfa.gov/y2k/ 

• Year 2000 Infoimation Center - www.year2000.com 

• Small Business Administration - www.sba.gov/y2k/ or (800) 827-5722. 

• “The Year 2000 Problem: Guidelines for protecting your patients and practice” This 
guide was produced by the American Medical Association and can be accessed by ACP- 
ASIM Members at: http://www,acponline.org/private/y2k/anamanue.pdf 
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What is the Year 2000 problem? 

Originally many computer systems were designed to use only six digits, instead of eight, to 
record the month, day, and year. This pattern continued in the computer industiy until verj' 
recently. Consequently, many computers and information systems are programmed to recognize 
the date ”01-01-00" not as January 1, 2000, but as January 1. 1900. If they are not converted or 
updated, these systems will fail when the year 2000 arrives. "Failure" can take many forms, most 
of them unpredictable. Not only can the system give false results, but in many cases it can 
become so confused that it will simply shut down and lock up. 

Because computers control a wide variety of equipment, from elevators and phone systems to 
medical devices, Y2K failures can be both highly disruptive and potentially dangerous. 
(Computer chips are also embedded in many otherwise mechanical devices, which can easily be 
overlooked in identifying items that need to be Y2K compliant.) 
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A basic strategy for addressing the Y2k problem 

Because time is now ver>' short and your practice has so much at stake, it is extremely important 
that you attack this problem strategically, focusing first on those items likely to have the greatest 
impact on your practice and subsequently on as many others as time permits. There are six basic 
steps to follow: 

1 . Awareness: Learn how systems can be affected so that you will be able to judge which 
of yours are potentially Y2K vulnerable. 

2. Priority setting; Establish the priority order for investigating your potentially vulnerable 
sj'stems, starting with the ones that are most crucial to your practice. Do not let the 
investigation of critical systems be put off until later while your practice gets bogged 
down working through a long list of relatively low risk support equipment. 

3. Assessment: Determine the readiness of any system affecting your practice to operate in 
the new millennium, investigate them in priority order. As appropriate, test them or 
obtain formal certifications of Y2K compliance from outside vendors or data exchange 
partners. 

4. Corrective action: If any equipment or systems in your practice are found to be non- 
compliant, follow the three "R's”: Repair, Replace or Retire. Repair may be the cheapest 
and fastest solution, but Y2K retrofits are not available in all cases, nor reasonably 
priced. Replacement can give you the added benefit of also updating your system; 
however, at this late stage, you must be absolutely certain that the installation and all data 
conversion, staff training, and testing can still be accomplished before the end of the year. 
Retiring a non-essential system or equipment item still requires backing up and storing on 
a Y2K compliant system any related data that may need to be retrieved after I/l/OO. 

5. Testing: Do not rely on assurances. Have all of your existing, new, and repaired systems 
fully tested to make certain that they actually work. 

6. Contingency planning: Decide what to do if something goes wrong in the year 2000, 
despite your best efforts, e.g. if you are unable to correct all items on your Y2K check list 
in time, or some corrections do not work as expected, or external events uncontrollably 
impact your practice. Take steps now to anticipate such contingencies. Plan what you will 
do to keep your practice operational if Y2K failures occur. Focus on things that would be 
most troublesome for you and your patients. 
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ACP-ASIM Observer 

Will the Y2K bug force you to replace your computer? 

Tips to determine how the year 2000 problem will affect your practice's 
ability to conduct business 

From the March 1999 ACP-ASIM Observer, copyright © 1999 by the American College of Physicians- 
American Society of Internal Medicine. 

By Carl Cunningham. MBA 

If you haven't prepared your practice to handle die year 2000 computer problem, you now have two 
things to worry a^ut: not only is there a chance that you have to replace, rather than fix. your computer 
system, but time to do so is running out. 

While the problem, frequently referred to as the Y2K or millennium bug. is expected to affect computing 
devices throughout health care, it will hit physicians die hardest by crippling practice management 
software. If you think that the worst thing the Y2K bug can do is cause your bills to go out misprinted 
"Jan. 1, 1900" instead of "Jan. 1, 2000." think again. Experts say that when a computer reads "1/1/00" as 
"Jan. 1. 1900," it could get confused, diut down and possibly even refuse to reboot. 

At that point, with no access to your accounts receivable, how will you bill your patients and third- party 
payers, or even know which payers owe you? Without access to patient sch^ules. how will you know 
which patients are coming to see you the next day and what slots are available for future scheduling? 
Obviously, your cash flow and office operations could be seriously disrupted. 

If you don't already know whether your existing practice management ^stem can be made Y2K 
compliant, call your vendor. If you have minimi^ your practice's expenses by retaining an older 
computer system and/or by deferring die purchase of software upgrades, your system may not be Y2K 
compliant. Recognize that as late as 1997, a number of vendors were still selling expensive software that 
was not Y2K compliant. Physicians have taken at least two of these vendors to court to address the 
problem. 

If your vendor can supply you with a "patch" to fix the Y2K problem, order one right away. Backlogs for 
these retrofits could develop by midyear as practices rush to get them. Some vendors are exploiting this 
situation by charging thousands of dollars for Y2K compliance packages. Worse yet. there may not be 
Y2K compliance retrofits available for many older systems, whose original developers have gone out of 
business or been acquired by large national firms that don't want to support older products. 

If you own one of these phased-out "l^acy" systems, you may have to replace your hardware as well as 
your practice management software. Even if you can fix your existing system, it may be more cost 
effective to buy a modem system that gives you greater functionality. 

Unfortunately, time is quickly running out to make such a complex purchase. With literally hundreds of 
systems to choose from and a flood of end-of-the-millennium orders, it will probably take longer than the 


1-4 



65 


usual six to nine months to select and install a new computer system. As a result, the longer you wait to 
start the selection process, the greater the risk that tiie vendor you pick will be too busy to install your 
system before Jan. 1 , 2000. Some analysts predict that backlogs for new systems will start to develop this 
spring, so you should start your search immediately. 

Smaller practices may be able to opt for "off-the-shelf products that you can use to replace your existing 
system. These low-end products typically sell for less than $2,000. but they offer only bare-bones features 
and very basic billing and scheduling functions. That may be enough for small practices, however. These 
products may also prove to be the best — or only — opti<m if vendors of high-end products can't deliver 
before Jan. 1, 2000. 

The College can also help. Over the last year, articles about how to cope with the Y2K problem have 
appeared in both the ACP-ASIM Observer and Today's Internist, and another comprehensive article is 
planned for the next issue of ACP~AS1M Observer. (Go to ACP-ASIM Online at www.acponline.org for 
back articles from either publication.) In addition, the College's Center for a Competitive Advantage has 
developed an information packet, "Selecting a Software System," which is available on the College's Web 
site and through ACP-ASIM Customer Service (800-523-1546, ext. 2600, or 2 1 5-351 -2600, 9 a.m. to 5 
p.m.. EST). 

The College is also developing new guides, checklists and scorecards to help members evaluate, compare 
and select Y2K-compliant practice management and electronic medical records software. Look for these 
and other tools on ACP-ASIM Online in the "Computes in Medicine" section. Finally, members can call 
the College's Medical Informatics Department (800-523-1 546, ext. 2572) for more information about 
Y2K compliance issues and the Center for a Competitive Advantage (800-338-2746, ext. 4553) for 
information about purchasing a computer system. 

Carl Cunningham, MBA, is Director of the College's Center for a Competitive Advantage. 


Government to doctors: time to get oflice systems Y2K compliant 

The federal government is turning up the heat to encourage physicians to make their office systems Y2K 
compliant. 

As pan of its Y2K efforts, HCFA has instructed its M^icare carriers to reject electronic claims that do 
not use a four-digit number to indicate the year beginning April 5. 1999. In a Jan. 13 letter. HCFA 
directed its carriers to return to provide claims that use the older two-digit format. Computer systems can 
misunderstand two-digit dates on claims that describe years beyond 1 999; that confusion is the heart of 
the Y2K problem. 

Based on its current experience, HCFA believes that the restriction will immediately affect only a small 
percentage of Part B claims. Many physicians submit their claims through clearinghouses or other 
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electronic intermediaries, which already correct date formats. College officials are concerned, however, 
{hat physicians getting help from these services may mistakenly believe that their systems are Y2K 
compliant because HCFA and other payers are able to process their claims. The problem is that these 
services will be unable to woik with physicians using non-Y2K compliant systems starting Jan. 1. 2000. 
HCFA had previously said that it would require claims to be Y2K compliant by Jan. 1 of this year but 
then extended its deadline to give providers more time to prepare. For more information about the change, 
contact your Medicare carrier. 

In another year 2000 development, the government will hold its second "Y2K Action Week" March 28 
through April 3. The goal of the event is to raise public awareness about Y2K issues and to alert 
communit>' organizations to prepare their systems fx the new millennium. 

The week will focus attention on institutions and organizations in 25 different business sectore rmiging 
from banking to food service to health care. During the week, members of the press in local communities 
are expected to talk to members of these industries, including physicians, about their plans for dealing 
with Y2K issues. 

HCFA officials are encouraging f^ysicians to prepare to answer questions that repOTrers and patimts may 
ask. Officials say that ph^icians stould be able to answer detailed questions about how they have 
prepared their office systems — including cmnputerittd records systems, billing systems and appointment 
scheduling sysrems — to handle year 2000 problems. 
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Is your practice prepared for Y2K? 

If you're not ready by July, experts say that it may be too late 

From the April 1 999 ACP-ASIM Observer, copyright 1 999 by 

the American College of Physicians-American Society of Internal Medicine. 

By Edward Martin 

When Mason City Clinic in northern Iowa began having problems scheduling routine 
examinations for its oldest patients several years ago, few realized that the confusion was an 
omen of the technological trouble soon to follow. 

Because the clinic's computerized scheduling software uses only two digits to record patient birth 
dates, a patient bom in 1 895 would be listed as being bom in '95. The computer software 
assumed that the patient had been bom in 1995--and scheduled pediatric exams for the clinic's 
centenarian patients. 

The glitch was an early example of what has come to be known as the year 2000--or Y2K--bug, 
in which computer programs that abbreviate dates to two digits are expected to fail in the new 
millennium. As the clinic's physicians and administrators discovered, incorrect birth dates were 
just the tip of the iceberg. 

"Among other things, we found that the city's municipal computers that monitor and control 
levels in the water tower that supplies us hadn't been made compliant,” said Hal Hawkos, vice 
president for information systems at North Iowa Mercy Medical Center, which 
owns the clinic, a 350-bed hospital and 40 other clinics. Although remote, he said, "That raised 
the possibility that even our water supply could fail in January.' 

As the new century approaches, physicians and health care organizations around the country are 
trying to prevent worst-case scenarios where computers shut down critical biomedical 
equipment, cause elevators to freeze and disrupt power and communications. While 
experts say that such situations are unlikely, there is serious concern about the health care 
industry's ability to prepare for technological problems. 

According to a recent report from the Senate Special Committee on the Year 2000 Technology 
Problem, health care is the least prepared to deal with Y2K problems. The report noted that only 
about 60% of hospitals were planning to test their Y2K fixes before the new year, making them 
vulnerable to any glitches that these fixes may cause. 
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But the Senate report contained an even more disturbing statistic: About 90% of physicians are 
completely unaware of how' dieir offices may be affected by Y2K problems. In an industry that 
appears ill prepared to deal with Y2K issues, physicians rank dead last. 


Shifting fears 

As recently as a year ago, much of the alarm about Y2K problems concerned infusion 
equipment, ventilators, defibrillators and other devices with date-sensitive computer chips that 
can seriously affect patient care. Experts fear that computers that cannot handle a change in date 
will freeze and simply slop working, causing havoc. 

But the other part of the problem is that in health care, even seemingly innocuous glitches like 
wrong birth dates can have serious consequences. ”ln sophisticated monitoring systems, dosages 
are based on calculations that include age," said Donald 3. Palmisano, MD. a New Orleans 
surgeon who heads the AMA's year 2000 initiatives. "If you didn't override that, you could 
be giving pediatric dosages to someone 100 years old." 

With large health care organizations spending millions to address Y2K problems, some of those 
concerns are slowly abating. "There was a lot of doom and gloom about medical equipment, but 
we found most things worked just fine," said Mr. Hawkos fi-om North Iowa Metcy. "There might 
be a few of what we call 'workarounds, 'such as printouts that read '00' instead of '2000,' but that 
doesn't mean the equipment won't function properly," 

Even laige government agencies like HCFA say they will be ready for the new millennium. A 
year ago, many were predicting the Y2K problem would cause the collapse of the agency and its 
network of 78 outside contractors, which depend on compmers to process physician payments. 
But by Mmch, said HCFA spokesman Peter Ashkenz, 70% of those external systems had already 
been declared compliant, along with all of HCFA's 25 internal programs. "We will be ready on 
time." said Nancy-Ann DeParle, HCFA's administrator. "The question is, will doctors?" 

For now. the answer seems to be a firm "no." Even before the latest report from the Senate 
committee, analysts had identified health care as an industry that was lagging behind in its Y2K 
efforts. Kenneth Kleinberg, health care research director at the Gartner Group Inc., an 
information technology research firm in Stamford. Conn., said that on a scale of one to five, 
industries like banking have largely completed Y2K preparations and are at a four or five. In 
surveys of the health care industry, however, he said that most physicians were in stage one or 
two of preparations, which meant they had not recognized the problem or even begun addressing 
it. 
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For physicians, a critical factor in addressing Y2K issues is cost. Even a solo practitioner with 
just a server and a few personal computer terminals might expect to pay $15,000 to $30,000 to 
update or acquire new practice-management programs and hardware. For larger practices, those 
costs can go much higher. 

But analysts say that physicians who don't pay now will certainly pay later. That's because 
without a Y2K-compliant system, most physicians will be unable to bill payers and receive 
reimbursements. 

Dr. Palmisano experienced just stich a sitdation when his Medicare claims processor tried to 
update its computers for the year 2000. 

A number of physicians in Louisiana and Arkansas found their cash flow disrupted for up to six 
weeks. "We had to scramble to cover payroll and purchase supplies," Dr. Palmisano said. 

Similarly, Y2K problems can potentially cripple physicians financially, explained Nicollete 
Francey. MD, a Greenwich, Conn., internist whose firm. Corporate Wellness Management Inc., 
helps practices determine if vendors and others are ready. "This whole thing could turn out to be 
a small bump in the road, or a huge disaster," she said. "I'm concerned it could be the latter, 
particularly for practices under pressure from health maintenance organizations and struggling to 
survive." 

The time factor 

The costs of preparing for the year 2000 are only part of the puzzle facing physicians. Time— and 
the lack of it-may turn out to be physicians' biggest enemy in making office systems Y2K 
compliant. 

Consider the schedule that large health care organizations are following. In Iowa, for example. 
Mr. Hawkos said that high-risk technology— EKGs and heart monitors, for example-will be 
corrected and tested by June. Medium-risk items vital to finances will be tested by September or 
October, and low-risk items such as fax machines that merely date documents may remain 
uncorrected. 

Because they have fewer resources to throw at the problem, physicians should probably be 
somewhat ahead of that schedule. "Everything should be in place, tested and completed by July, 
and if not. you're in a danger zone," said Mr. Kieinberg from the Gartner Group. 

The bad news is that if you have already delayed too long, full compliance may be impossible. 
"At this point, we're in the administrative equivalent of medical triage." added Phillip L. O'Neill, 
a trial lawyer who represents physicians at the Washington law firm of Jackson & Campbell. 
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Even if you can't reach full compliance, you still need to get started. For physicians in smaller 
organizations, experts say that a good starting point is hardware such as network servers, desktop 
computers, laptops and handheld devices like PalmPilot computers used to store patient charts 
for rounds. 

Michael Mieure, Y2K project manager for Medic Computer Inc., a Raleigh, N.C., vendor of 
practice management software, said physicians should examine their computers' internal clocks. 
"Software won't run if you can't boot up," he said. BIOS, the basic input-output system that 
controls disk drives, carries dates that can crash computers. Mr. Mieure suggested downloading 
diagnostic programs fi'om manufacturers' Internet sites to check your computer. 

Some diagnostic tests can be simple, although experts emphasize that you should back up files 
and data in case you trigger a system crash. "Create a dummy charge for a date after the year 
2000 and see what your system does with it," suggested Roger A. Hofford, MD, a pediatrician in 
i-ynchburg, Va., who is on the technology committee of the Medical Society of Virginia. 

A number of Web sites also suggest advancing your computer's internal clock to the year 2000 to 
gauge its readiness for the new millennium. 

A number of experts, however, say this is a terrible idea. They warn that such a test can trigger a 
disastrous crash from which your computer may not be able to recover. It may be impossible 
to reset the machine's date once it has crashed, and if the computer is on a network, it could 
possibly damage other machines. 

Keep in mind that not all hardware problems will occur in computers. Security alarms, heating 
and ventilating systems and components of telephone systems like private branch exchanges— 
known as PBXs — contain microchips with embedded dates. 

Because not all problems will be limited to your office, an external checklist is equally critical. 
Check with oxygen, pharmaceutical and general medical suppliers to make sure that their 
systems are Y2K complaint. If an admitting hospital's compliance is in doubt, it might be prudent 
to arrange to admit patients to an alternate hospital. 

The biggest threat 

For most physicians, however, the biggest Y2K threat will come not from some outside system, 
but instead from their own practice management software. To determine your vulnerability, 
experts say, you and your practice managers should create a checklist of programs that handle 
functions like insurance processing, downloading data from medical devices, pharmacy 
inventories, plus staff scheduling, benefit and tax records. 
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When it comes to making your software Y2K compliant, there are three choices: completely 
replacing hardware and software; installing upgrades or "patches," special programs offered by 
software makers specifically for Y2K problems; or employing a consultant or programmer to 
tailor custom solutions. 

The problem with the first option--a new system— is that it is costly. "An eight-doctor practice 
that has used the same practice-management and billing and accounts receivable system for five 
or six years might have to spend $50,000 to $100,000 for new hardware and software,” said 
Rosemarie Nelson, a healthcare technology consultant with Health Care Data Systems Inc. in 
DeWin, N.Y. 

Time is another major hurdle in getting a new system before the new millennium. Physicians 
want to make sure they're getting the right system, but anyone just getting started will lack the 
time to be thorough. "They need to move ahead and not get caught in the paralysis of analysis,” 
said Ms. Nelson. "You have to spend $50,000, so you try so hard to do the right thing that you do 
nothing." 

The second option, an upgrade or patch, is a good one if your vendor is making such tools 
available. In addition, upgrades might come at little or no cost if the program is relatively new 
and the doctor has a service agreement with the vendor. 

Scott H. Stewart, ACP-ASIM Member, a general internist in Auburn, Maine, handles billing, 
accounting, receivables and internal payroll accounting with a practice package called Medicine 
PM. While the program isn't yet year 2000 compliant, his office staff is waiting 
for the vendor to create a fix sometime this spring. 

Experts warn, however, that physicians who wait until the last minute for their vendor to come 
through may discover that no such product exists. "The doctor who feels that because he laid 
his money out and is paying a maintenance contract he's automatically covered is in for a rude 
awakening," noted Mr. Kleinberg. 

Costs for these fixes vary and have led to a number of lawsuits. In one instance, physicians who 
paid dearly for new software fi’om Medical Manager Inc. sued when they learned that they would 
have to pay to make the product Y2K compliant. 

New Jersey obstetrician Robert Couitney, DO, said he paid $20,000 for Medical Manager 
software in 1 996 but then quickly learned that it was not year 2000 compliant. He and a group of 
1 5.000 other physicians won a lawsuit alleging that Medical Manager used Y2K as a ploy to 
charge $100 million for fixes. 
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Other physicians have found the third option — consultants — ^another source of help. John H. 
Sipple, FACP, a pulmonologist in Syracuse, N.Y., has used a program called DataBase to store 
patient summaries since 1984. To make sure that the software will continue to function in the 
new millennium, his group. Internist Associates of Central New York, contracted with Health 
Care Data to supervise its Y2K compliance. 

Experts warn that as January approaches, the potential for price gouging will grow. Mr. 

Kleinberg said that consulting rates have alre^y increased 50% between early 1997 and the end 
of 1998 as competition between banking, health care and other industries drove up demand. 
"Overall, $100 an hour is not an unreasonable rate for consultants," Mr. Kleinberg said, noting 
that many programmers make two to three times that amount. 

"Installing new hardware might take a week or two, and it could take another week to two weeks 
to replace practice management software, with total costs of $500 to $1,000 a day," Mr. 

Kleinberg said. "The whole process can run $15,000 to $20,000 for a small practice, not 
including the cost of hardware." 

While the prices may seem prohibitive, most experts caution that any extensive Y2K compliance 
effort is b^t left to professionals. "If you have a small organization without an information 
systems manager, you probably shouldn't attempt to tackle the issue by yourself," Mr. Kleinberg 
said. 

Contingency planning 

No matter which option you choose, if you wait too long you might have to resort to a more 
basic approach. "That can mean going back to your old, manual world of scheduling books and 
paper claims," said Ms. Nelson ftom Health Care Data Systems. 

In North Caroliiui, problems arose in 1998 when gastroenterologist Michael Gaspari, MD, one of 
1 1 doctors at the Charlotte Clinic for Gastrointestinal and Liver Disease, attempted to schedule 
colonoscopies for the new millennium. "Our computer started saying. There's no such date.' " 
explained clinic manager Ellen Calloway. 

• To deal with the problem, she set up a separate cmnputer system until the clinic's Medic 
software was updated. The glitch was resolved and the clinic is now ready for the new 
century. 

Procrastinators may find they have to resort to a similar solution: using generic business 
software and spreadsheets to tun ttieir offices. Such software generally goes for $3,000 or 
less, can be installed quickly and will do a basic job of tracking payments and scheduling 
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appointment. Experts say, however, that physicians should not expect too much from these 
systems. 

Finally, analysts say that not all Y2K contingency measures involve computers. Here is a 
sampling of strategies some experts suggest to prepare for year 2000 problems: 

• By September, you should increase your available credit. "It is not uncommon for a third of a 
practice's money to come from the local Blue Cross plan and a third from Medicare. Can 
your practice survive a blip in their systems?" asked Ms. Nelson. 

• Investigate backup power. Many practices already have uninterruptible power sources, and 
hospitals and some large clinics have permanent diesel generators for sustained operations in 
blackouts. Those systems are beyond the financial reach of most practices, but 
uninterruptible power systems for less than $2,000 can maintain computers long enough to 
shut them down without data loss if power fails. 

• Practices that don't already archive and store patient and financial records off site should 
begin. Before year end, Mr. O'Neill, the Washington attorney, recommended that physicians 
and employees check pension and 401 (k) statements for accuracy, and file their own paper 
copies. Administrators, if possible, should compile payroll, W-2 and other data before the 
end of December. 

• Physicians should avoid scheduling vacations from late December through early January, and 
managers should arrange for on-call physicians to remain in a single location during the 
critical New Year's period, in case paging and other communications systems go down. Some 
hospitals plan to limit elective surgery, and physicians should take it upon themselves to 
avoid scheduling it. 

The underlying message from experts, however, is simple: Physicians need to take action 
now. not later. "We're not striking a panic tone, but doctors should deal with this just like any 
other crisis." said Dr. Palmisano. "If patients come in bleeding, we do what's necessary to 
resuscitate them, stabilize them, find the cause and fix the problem. We should face Y2K just 
like any ill patient." 

Making the Y2K diagnosis; Web sites and other resources 

^Tiile most analysts recommend that physicians obtain outside help from consultants, there are a 

number of resources and diagnostic tests that you can use to gauge the extent of your Y2iC 

problems. 
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Professional societies like ACP-ASIM offer a number of resources, and other nonprofit 
organizations have been created specifically to deal with Y2K issues. And if you're technically 
inclined, a number of vendor Web sites provide Y2K information on their hardware 
and software products. 

Here is a list of some of the resources available to physicians: 

• ACP-ASIM has a Y2K section on its Web page (www.acponline.org/y2k/index.html) 
that features an information packet on how to evaluate and select practice management and 
electronic recoids software. The site also offers a Y2K compliance tool kit with inquiry letters to 
send to vendors and software to test for Y2K problems. 

In addition, the College will hold a Y2K workshop at this year's Annual Session. "The Year 2000 
Problem: Preparing Your Practice's Infoimation Systems" will give internists tips on how to 
minimize the impact of Y2K problems on their hardware and software. For more information, 
see the Annual Session final program. 

• The AMA's Y2K home page (www.ama-assn.org/not-mo/y2k/mdex.htm) offers articles about 
year 2000 issues, a list of frequently asked questions and suggestions for detecting compliance 
problems. Much of the material is available to members only. 

• The FDA's site (www.fda.gOv/cdrii/yr2000/year2000.html) offers detailed information the 
compliance status of ail kinds of biomedical devices. 

• The CDC (www.cdc.gov/y2k/y2khome.htm) ctmtains general information on Y2K isstres and 
details about its own compliance activities. 

• HCFA (www.hcfa.gov/y2k/defaiilt.htm) contains information on how Y2K issues will affect 
Medicare and Medicaid patients and providers. 

• Microsoft Year 2000 Readiness Disclosure & Resource Center 

(www'.mictosoft.com/itliome/topics/year2k/defauh.htm) offers a newsgroup to talk about Y2K 
issues and lists of Microsoft year 2000 products and resources. 

• Rx2000 (www .rx2000.org) is a Minnesota-based nonprofit group developing solutions to Y2K 
issues, lu Web site offers a schedule of its seminars, as well as a discussion group, articles, links 
to other sources and a speaker’s bureau. 

• Greenwhich Mean Time (www.gmt-2000.com/) sells tools to detect and diagnose Y2K 
problems on PCs. The site also sells educational videotapes on the topic. 
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• Year 2000 (www.year2000.com) offers a collection of news articles and links to Y2K 
consultants and vendors. 

Limiting your liability for year 2000 mishaps 

While the year 2000 problem is widely viewed as a technology issue, physicians should also 
consider it a serious liability concern. If patients are harmed by a Y2K mishap, experts say. they 
will likely come after you for damages. Here are some safeguards. 

Donald J. Palmisano, MD, an AMA trustee who is heading the organization's year 2000 
initiatives, said that a good place to start is to contact your malpractice insurers. Ask if their 
policies cover you if patients are injured by a Y2K failure. Many policies consider Y2K as an 
avoidable threat, not an accident, and don't cover Y2K-related problems. 

Dr. Palmisano cited several examples from more than 450 software-based equipment failures 
since 1986 as types of problems that might become more likely when the new year arrives: He 
pointed to one instance in which a radiation therapy machine gave excessive dosages to six 
patients, resulting in three deaths. Other more common technological glitches include heart 
monitor breakdowns and ventilators that cause comatose patients to take too many breaths. 

In many of these instances, everyone including doctors, vendors, equipment makers and 
maintenance companies were dragged into lawsuits. "Doctors could bear the brunt of Y2K 
liability," Dr. Palmisano added. "People filing claims will look for deep pockets and attempt to 
get as many people as possible involved." 

For that reason. Dr. Palmisano said, the AMA has been fighting an attempt in Congress by 
biomedical equipment makers to limit their liability in exchange for divulging problems with 
their equipment. Several legal sources noted that physicians, as owners and end-users of 
equipment, are likely to be held ultimately responsible for its proper and safe use. 

To protect yourself, experts say, you should keep detailed records. "It's important to document all 
inquiries to software and equipment makers, vendors, suppliers, utility companies and everyone 
else." said Phillip L. O'Neill, health care attorney with the Washington, D.C., law firm of 
Jackson & Campbell. "This can be as simple as writing a letter, or at least keeping a log of 
telephone conversations with names and ^tes. Ifs true that an office manager can testify, but 
human memory can be a frail thing." 

Finally, there is an even more basic reason to document your Y2K compliance efforts. 
Corporations, hospitals, health plans and others will increasingly refuse to do business with 
practices that can't certify’ compliance, 

Edward Martin is a freelance writer in Charlotte. N.C. 


I - 15 



Biomedical Equipmeat Crisis in the Year 2000? 


Annals of Internal Medicine 
November 15, 1998 


An Internet resource providing information about the impact of the “Year 2000 Problem” on 
biomedical equipment has been established by the U.S. Food and Drug Administration (FDA); 
http://www.fda.gOv/cdrh/yr2000/year2000.html 

The Year 2000 Problem, or “millennium bug,” occurs in computer operating systems and 
applications software whose designers conserved storage space by eliminating the first two digits 
of the year when encoding date information. Authors of these programs did not expect that they 
would be used in the year 2000, but such software continues to be used throughout industrj' and 
government. In clinical medicine, programs that control monitoring and medication delivery 
equipment could malfunction or shut down if they are not modified to address this problem. 

The FDA Web site was developed to collect responses to a request by the agency that 
manufacturers provide information about compliance for all products expected to be in service 
on I January 2000. Although originally intended to assist federal agencies that purchase medical 
devices and laboratory equipment, the resource’s audience has been expanded to include the 
private sector. 

Visitors to the site may search a database to find out whether a product has Year 2000 
compliance problems. (“Year 2000 compliance” means that a device accurately processes and 
stores date and time data during, from, into, and between the 20th and 21st centuries.) If a 
product is not yet compliant, the database provides space for a description of the problem, as 
well as any planned solution and implementation date. Manufacturers may use the site to submit 
inlbimation about their products electronically and can remm to update their existing entries in 
the database. 

In September. U.S. Senator Christopher J. Dodd criticized the slowness of the biomedical 
equipment industry in responding to the FDA’s request for information about compliance, stating 
that only 755 of 1935 companies contacted by the agency had provided information. 
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Is your practice prepared for the millennium bug? 

If the year 2000 computer problems seems like a lot of hype, consider the 
possible consequences 

From the May 1998 ACP Observer, copyright © 1998 by the American College of Physicians. 

By Howard Wolinskv 

If you're like most internists and use a computer in your practice for records, appointments or 
billing, take a look at the calendar. The year 2000 is approaching, and it may mean a 
technological disaster unless you have already begun to deal with the millennium virus. 

The virus, also known as the Y2K bug, has received a lot of attention over the last few years. 
Experts predict that it will shut down factories and power plants, bring down phone lines and 
ground air traffic. The problem, which stems from the inability of many computers to read four- 
digit dates, is expected to cost as much as $600 billion to fix. 

Put simply, the Y2K bug is a byproduct of computing's early days, when programmers left off 
the first two digits of the century — ^representii^ 1968 as 68, for example — ^to save precious 
computer memory. Programmers thought that the abbreviated dates would later be expanded to 
include four digits as technology improved and memory became cheaper. While technology 
improved, the Y2K defect was not corrected in many cases. Thus, when the year 2000 arrives, 
many computers will think it is 1900, not 2000. 

While the millennium bug may seem like a lot of hype, experts warn that health care may be hit 
particularly hard. The medical industry depends on computers for both patient care and business 
functions, but it is lagging far behind banks, insurance companies and manufacturers in efforts to 
inoculate against the Y2K bug. 

Last fall, for example, the Gartner Group Inc., a technology research company in Stamford. 
Conn., found that two-thirds of health care organizations had not started to prepare their 
computer systems for the year 2000. Gartner predicted that health-care organizations that had not 
launched repair efforts by last fall can expect at least 10% of their information systems to fail. 


Problems in your office 

For individual doctors, the millennium bug presents serious problems. Edward Yourdon. a 
computer expert and co-author of "Time Bomb 2000." warned that doctors who run software on 
desktop computers that are more than two years old are especially vulnerable to Y2K problems. 
Much hardware from that time is not year-2000 compliant and can present problems. 
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Aggravating the situation is the fact that many fAysicians are incredibly lax when it comes to 
backing up their data. "It will be of little surprise if doctors begin reporting massive failures, 
disruptions and data loss after Jan. 1, 2000," Mr. Yourdon said. 

Another potential trouble spot, Mr. Yourdon smd, is software written by individual physicians in 
the early days of computerization. If such "legacy" software is still in use. it is far more likely to 
cause problems than packaged software from vendors who update their programs. 

In fact, the good news is that most large vendors are addressing the Y2K problem for doctors. 
For example, the latest version of Medical Manager software, which is used to manage the 
offices of nearly 120,000 physicians, is year-2000 compliant. John Kang, president of Medical 
Manager Corp.. said his company has also been educating its customers through a direct mail 
campaign about millennium compliance. It has also created special teams dedicated to upgrade 
installations. 

To avoid problems, however, physicians should contact the vendor of their software and look 
into upgrades or other fixes. "Physicians must immediately obtain information from their 
vendors about this matter and take steps well in advance of that date to update, upgrade, or 
change those systems to prevent failure in their billing systems," said Mark Leavitt, AGP 
Member, chief executive officer of MedicaLogic Inc., the Hillsboro, Ore.-based maker of the 
Y2K-compIaint Logician and ClinicaLogic medical records software. 

But what about physicians who are using software that was custom-made or came from vendors 
that no longer are in business? 

"The problem with Y2K is that in many cases you won't know you have a problem until too 
late," explained J. Wade Yarbrough, PhD, senior vice president of consulting services at Future 
Healthcare Inc., a national clinical informatics consulting firm in Chapel Hill, N.C, "Unless you 
have a way to change the system date to 2000 and test the system, you can't tell if you have a 
problem or not." 

One way to test your system is to set the clock for a date in the year 2000 and see how it 
responds, but experts say that such a test may do more harm than good. "Setting the clock 
forward and testing a program can cause a complete disaster," explained Dr. Leavitt from^ 
MedicaLogic. "Many programs lock up when log-in dates appear to be out of sequence." His 
advice; "Get skilled help." 
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Problems elsewhere 

Physicians also need to remember that not all year 2000 problems that affect physicians will take 
place inside the office. Experts note that many devices with chips vulnerable to Y2K failures are 
found in hospitals and include ventilators and MR] equipment. 

Pmn Walter, a partner at the Chicago law firm Gardner. Carton & Douglas and co-chair of the 
firm's Year 2000 task force, said that problems with these devices can threaten patient care. If 
records are inaccurate or unavailable, for example, patients could receive the wrong doses of 
medicine or diagnoses. If patients are injured or die as a result, physicians may have to establish 
that they were not the cause of the harm, she said. 

To protect their patients from potential problems as well as to protect themselves from potential 
lawsuits, physicians ought to take an inventory of every way in which their practice may be 
affected by Y2iC Ms. Walter said. 

"Physicians should inquire about the year 2000 remedies of every system that could affect their 
patients or their billing systems, including hospitals, clinics. HMDs and other providers and 
insurance companies,” she said. "If diey do not receive adequate answers, they should consider 
contingency plaiuiing." 

In general, experts suggest that physicians ask ho^itals, clinics and other health-care institutions 
they work wiA about potential year 2000 problems. Just asking could help minimize adverse 
patient experience by forcing institutions to address their year 2000 issues, they said. Ms. Walter 
added that it also helps demonstrate the doctor's diligence in attempting to assure quality care for 
their patients. 

Meanwhile, you might want to hold off on making plans for the night of Dec. 31. 1999. Already, 
some travelers are shying from the skies, worried that airports, if not the planes themselves, 
could encounter problems. 

And some hospitals are already trying to limit liability by asking their staffs now not to make 
plans, said Mr. Kang from Medical Maiuiger Inc. ’They are requiring a large staff of doctors and 
nurses to be present when the clock strikes midnight," be said. "They want to make sure the IVs 
are dripping and the heart monitors are working." 
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Possible Sources for Seminars on Y2K 


These organizations have previously offered seminars on Y2K. Please contact them directly to 
determine whether they plan to offer future seminars and to get information about such seminars. 


ACP-ASIM 

• Annual Session Y2K Seminars April 23 & 24 

• www.acponline.org 

• (800) 523-1546 ext 2600 


American Medical Association 

• AM A Member Service Center - (800) 262-32 1 1 

• www.ama-assn.org/not-mo/y2k/ 


Health Care Financing Administration 

• www.hcfa.gov 

• HCFA toll-free Y2K hotline: (800) 958-4232. This number will connect you with a 
HCFA Y2K expert who can answer questions regarding medical supplies, Medicare 
billing and other issues. 


Small Business Administration 

• www.sba.gov/y2k/ 



IMMEDIATE ACTIONS TO TAKE 
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Immediate Actions To Take 

2 - I Four First Steps To Take 
2-2 Four "Don'ts" 

2-3 HCFA Sample Provider Y2K Readiness Checklist 
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Four first steps to take 

1 . Call the vendor(s) today who supports your practice's critical computer system(s) to find 
out whether they are Y2K compliant. 

• Ask about your versions of software and hardware for practice management and 
any electronic medical records, lab, transcription, or other software systems you 
employ. 

• If the answer(s) are positive, request formal written certification(s) that the 
systems are entirely compliant. 

• If a system is not compliant, ask whether a retrofit (Y2K patch) is available to 
make it compliant. If so, and the price is not exorbitant, ask the vendor to 
immediately schedule your patch ~ before installation backlogs begin developing 
later in the year. 

2. If no Y2K patch is available for your computer system, or the cost of one is prohibitive, 
immediately launch an intensive search for a replacement system. Precious little time 
remains in which to complete this complex selection and installation process. Turn to Tab 

3. “Medical Practice Computer Systems Compliance.” and Tab 6, "Selecting a Software 
System Infotmation Packet." 

3. Identify any biomedical devices used in your practice which contain non-corapliant 
embedded computer chips that potentially might affect clinical outcomes. Turn to Tab 4, 
“Medical Devices Compliance,” and visit the listed FDA website to determine which 
medical devices are vulnerable. Follow the guidance provided regarding vendor 
compliance certifications, retrofits, replacements, or retirement of equipment as 
appropriate. 

4. Review your other practice support systems, data exchange parmers (whose corrupted 
data could infect your system), and outside vendors. Determine which of them may be 
vulnerable toY2K problems. Use the following HCFA supplied check list to review and 
inventory your support systems. Decide which of them are most critical to sustaining 
your practice operations; set priorities; and investigate the most important ones first, 
especially the telephone system. Turn to Tab 5 (Support Systems and Outside Vendors 
Compliacne), for guidance, web sites, model vendor inquiry letters, compliance 
statements, and other corrective measures. 


2- I 
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Four ’’Don'ts” 

! . Don't wait to find out whether your practice computer systems are Y2K compliant. If 
they are not compliant, vendor support may not be available to make them compliant. In 
that case, any delay in selecting a replacement system now could result in your practice 
being caught up in vendor installation backlogs predicted to develop in the remaining 
months of 1999. At some point around mid year it may no longer be possible to schedule 
an installation before the year 2000. 

2. Don’t delay in ordering Y2K patches, if needed. Backlogs could develop for them as well. 

3- Don't attempt to self diagnose Y2K. compliance by rolling the date of your system 

forward to the year 2000. Although commonly suggested as an inexpensive diagnostic 
technique, this approach, according to experts, can lead to serious adverse consequences 
in some cases, including locking up the system, in other cases the diagnostic results may 
be incomplete and inaccurate. Hardware may be checked by downloading test software 
at: http.-//www.nstl.com/htm!/nsti_ymark2000.html. However, most practice management 
softwsis can be safely tested only by a trained computer professional. Often he/she will 
also be able to determine the compliance of hardware. Self diagnostic software supplied 
on line by mass vendors of standard word processing and other PC applications 
presumably is safe to use. 

4. Don't rely on someone's oral assurance that your computer or other systems are Y2K 
compliant. Your business and your patient's lives may be at risk. You need fonnai 
assurance, in writing, both to protect yourself legally and to be confident that your 
operations will be able to safely continue beyond 1/1/00. Don't wait; you need to request 
that assurance now while there is still time to correct any deficiencies. 


2-3 
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SAMPLE PROVIDER Y2K READINESS CHECKLIST 


Please note: This checklist is intended as a supplemental guide in 
helping yon determine your Y2K readiness. Consider using this along 
with other diagnostic and reference tools you have obtained for this 
venture. The purpose of this checklist is to aid you in determining your 
Y2K readiness. This information is not intended to be all inclusive. The 
Health Care Financing Administration will not assume any 
responsibility for your Y2K compliance. 


Item 


Not Y2K Ready 

Bank debit/credit card expiration dates 



Banking interface 



Building access cards 



Claim forms and other foims 



Clocks 



Computer hardware (list) 



Computer software (list) 



Custom applications (list) 



Diagnostic equipment (list) 



Elevators 



Fire alarm 



insurance/pharmacy coverage dates 



Membership cards 



Medical Devices (list) 



Monitoring equipment (list) 



Smoke alarm 



Telephone system 



Spreadsheets 



Treatment equipment (list) 



Safety vaults 




This inforaiation was provided by HCFA from their webpage: 
http://www.hcfa.gov/y2k/pltrenc.htm 
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MEDICAL PRACTICE COMPUTER 
SYSTEM COMPLIANCE 


Tat 3 
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Medical Practice Computer Systems Compliance 

3 - 1 Computer system compliance; Steps to follow 

3-3 "How Will I, As A Provider, Be Affected By The Year 2000 
Challenge?" 

3-6 HCFA April 5, 1999 cut off of 4 digit claims notice 

For the most recent information, visit HCFA’s Year 2000 Web Site: 
www.hcfa.gov/y2k 

3-9 Model Vendor Inquiry Letter and Software Vendor Checklist 

• YMARK2000 Software that tests your computer's BIOS for Y2K 

compliance is available at: www.nsti.coin/html/nstl_ymaiic2000.html 


Tab 6 


Selecting A Software System Information Packet 
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The Year 2000 Computer Problem 

Computer system compliance: Steps to follow 

For most physician offices, the practice management computer system is the oneY2K 
compliance problem with the broadest potential ramifications. If that system locks up on 1/1/00, 
the practice's overall operations are likely to he disrupted. It is also the system which could 
require the longest lead time to rectify. Therefore give it fop priority for investigation. Call the 
vendor today who supports your practice's computer system(s) to find out whether they are Y2K 
compliant. 

• Ask about the compliance of your specific versions of software and hardware for practice 
management and for any electronic medical records, lab, transcription, or other software 
systems you employ. 

• If the answer(s) are positive, request formal written cenification(s) that the systems are 
entirely Y2K compliant. Don't rely on someone's oral assurance: your business operations 
and cash flow may he at stake. You need formal assurance, in writing, both to protect 
yourself legally and to be confident that your operations will be able to safely continue 
beyond 1/1/00. A complete list of model vendor compliance inquiry letters can be found 
at: www.y2kexpetts.com/certified_y2k_ready/fonndocuments.htm. 

Act now while there is still time to correct any deficiencies. 

• If a system is not compliant, ask whether a retrofit (Y2K patch) is available to make it 
compliant. If so, and the price is not exorbitant, ask the vendor to immediately schedule 
your patch -- before installation backlogs begin developing later this year. 

• If no Y2K patch is available for your computer system, or the cost of one is prohibitive, 
immediately launch an intensive search for a replacement system. Precious little time 
remains in which to complete this complex selection and installation process. 'Vendor 
installation backlogs are predicted to develop some time in 1999, probably around mid 
year. Thus any delay in selecting a replacement system now could result in your practice 
not being able to obtain installation of your preferred product before the year 2000 
begins. See Tab 6 “Selecting a Software System Information Packet” which was 
developed by the Center for a Competitive Advantage to assist and expedite your 
selection process. 


NOTE: 'We recommend that physician oRiccs not attempt to self diagnose medical 
practice software for Y2K compliance (unless they have a proficient computer 
technician on staff). According to experts, such seemingly simple and commonly 
suggested diagnostic techniques as rolling the date of your system forward to the year 
2000 can sometimes produce serious adverse consequences, including permanently 
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locking up the system. In the hands of a non-technician, the diagnostic results may also 
be incomplete or inaccurate. (Self diagnostic software supplied by commercial vendors of 
standard word processing and other PC applications is an exception which should be safe 
to use.) 

If you wish to test just your hardware, use reliable testing software . The National 
Software Testing Lab (NTSL), owned by CMP, has freeware to test your hardware. The 
webpage wwwjistl.coiti/html/nstl_ymark2000.html will test your computer's Basic Input 
Output System (BIOS) where most date errors originate. Keep in mind, however, that the 
trained computer professional who tests your practice software can often test the 
hardware at the same time. 


S.-2 
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HOW WILL I, AS A PROVIDER, BE AFFECTED 
BY THE YEAR 2000 CHALLENGE? 


Provided by HCFA from: www.hcfa.gov/y2k/one4(2).htm 

You will be affected, either directly or indireclly, by the year 2000 challenge. Taking proactive 
steps to identify and address potential impacts will be key to your success and meeting the needs 
of the patients you serve. Let's look at a few examples of how you may be affected. 


FINANCIALLY; 

If your systems and those with which you inter&ce are not Y2K ready, the transfer of 
information including claims processing information could be affected and therefore, so could 
your cash flow. If you bill claims to multiple entities (e.g., Medicare, Medicaid, private insurance 
companies, and managed care organizations) you could face problems if you do not ensure your 
readiness with each of these entities. 

if you rely on another entity (e.g. a billing service or clearinghouse) to handle claims filing 
procedures for you and they are not fully ready, this could add additional costs to your business. 
This is particularly true if payment for their services is based on the number of claims filed, since 
your billing vendor may file your claims more than once. 

It is important to keep in mind the Y2K challenge is very broad. Here are a few examples of 
systems that may be affected; 

• elevators (e.g., it may include programs for maintenance checks) 

• telephone systems (e g., billing date changes) 

• payroll systems 

• electrical systems 

• office forms (e.g.. spreadsheets, form letters) 

• office security systems 

• referral and order forms 

Special Note to Electronic Submitters (to be used by Medicare contractors that currently 
accept electronic submissions which contain six digit dates of service). 

If you or your billing company currently submits electronic claims with six digit dates of 
service or dates of birth, such as I2/3I/9S,yoH will need to change your billing system so it 
can submit and receive an eight digit date (19911/12/31). (While there are a number of ways to 
accomplish this, one extremely reliable method is the expansion of the year within your 
computer system from two to four digits.) HCFA will begin rejecting electronic submissions 
with six digits sometime in 1999. You will be notified weli in advance before contractors begin 
returning claims for this reason. 
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WHAT CAN A HEALTH CARE PROVIDER DO TO A VOID POTENTIAL Y2K 
PITFALLS? 

There are key steps you can take to become Y2K ready and excellent sources of information 
available to help you. Here are a few suggestions to consider. Please keep in mind these are just 
that, suggestions; they are not intended to replace other actions you are taking or serve as the 
only steps in your readiness plan. 

Step One: 

Become aware of how the year 2000 can affect your system. Anything dependent on a microchip 
or date entry could be affected. Also, do not forget to identify those entities that you depend on 
or who depend on you. From a systems perspective, inventory both your hardware and software 
programs. List everything and identify your mission critical (cannot live without) items. These 
should be your priorities. 

Step Two: 

Assess the readiness of everything on your list. You can do this by contacting your hardware or 
software vendor or accessing key information from various web sites (see attachment B). Also, 
do not forget your maintenance and service contractors; they can help you in deciding readiness 
as well as systems upgrade and replacement options. In addition, there are many organizations 
offering services to assess business readiness. Your state association can help you further, 
particularly in the areas of biomedical equipment and medical devices. 

If your particular software program or form is not Y2K. ready, you need to decide whether you 
really need to invest in an upgrade or replacement. In making this decision, bear in mind the 
potential challenges you could face if changes/upgrades are not made, particularly to programs 
that support your key business processes. 

Step Three: 

Update or replace systems and software programs you decide are important for your business 
continuity. 

Step Four: 

Test your existing and newly purchased systems and software. Do not assume a system or a 
software program is ready just because someoue said it was. Test each Just to make sure. 
During this process, keep track of your test plans and outputs just in case a problem surfaces 
later. 

If you would like to test your interfaces with a Medicare. Medicaid or managed care 
organization, give them a call so that testing can be considered and arranged. 

Step Five: 

Develop business contingency (continuity) plans in the event something goes wrong. Focus on 
the things that would be most problematic for you and your patients. For example, what will you 
do if.... 
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Claims cannot be sent in the right fotmatto an insurer; 

Equipment required by your patients does not function properly; 

Laboratory or diagnostic facilities where you refer patients cannot identify and accurately 
reports to an insurer the dates you submit on your order forms; 

Outputs from monitoring and reporting equipment are not accurate or complete; 
Electronic remittances from Medicare or Medicaid are not retrievable; 

Accounts receivable system does not work properly; 

Checks cannot be deposited in your bank or credited accurately; or 
Payroll system does not function appropriately. 


3 


5 
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This information was provided by HCFA from: www.hcfa.gov/y2L'4dgtfact.htm 

Another Step Forward for Year 2000 
Compliance: Medicare Establishes Deadline for 
Submitting Y2K-Ready Claims 

As of: February 10, 1999 


Backfrmmd: Each year more than one million doctors, hospitals, and other health care providers and 
suppliers sutoiit approximately one billion claims to Medicare to be reimbursed for services provided to 
Medicare's nearly 40 million beneficiariesisee footnote I - at the bottom) The vast majorit\' of claims are 
submitted by electronic means, although some are still submined on paper. This high level of electronic 
billing allows the federal government to achieve significant operating efficiency and cost savings for the 
Medicare program and for health care providers and suppli«^. This reliance on automated systems has 
also made the Year 2000 (Y2K) computer fix a major challenge for the Health Care Financing 
Administration HCFA, the agency that administers the Medicare program. 

HCFA is making significant progress in its effort to completely renovate, test, and certify approximately 
30 million lines of code on the 78 computer systems operated by its contractors that process and pay 
Medicare claims. HCFA will be ready on January 1, 2000 to timely and accurately pay claims. It is 
incumbent upon providers and suppliers to ensure that their billing systems are Year 2000 ready so they 
can bill Medicare accurately and in a timely manner. In order to bill Medicare, claims must include 8- 
digit dates, with the year being 4 digits <e.g., 2000). 

ON^r the past year. HCFA has been working closely with its provider partners to ensure a smooth 
conversion from the old billing formats to new formats that are Y2K'Compliant. These efforts include 
issuing numerous program instructions as well as hosting educational meetings on how to prepare 
systems for the Year 2000. In addition. HCFA’s Medicare contractors have offered, and continue to offer. 
Y2K-ready software to providers for free or at minimal cost. 

Since the Spring of 1998. HCFA has been working with its contractors to begin preparing providers and 
suppliers for the requirement that they submit all claims using S^digit date fields. On Januar>' 13. 1999. 
HCFA notified Medicare contractors that, beginning April 5, 1999. claims not submitted in the Y2K 
formal must be returned to providers as unprocessable. On February 1 . 1 999. the Medicare contractors 
issued bulletins to all providers detailing this April 5. 1999. compliance deadline. 

It is critical that all providers submit bills in the prescribed Y2K -compliant fonnat so that HCFA's 
systems can continue to process and pay bills promptly throughout the millennium transition. The abiiin- 
ofa provider to submit electronic data interchanges in a Y2K-compiianl 8-digit dale does not mean that 
ail oWhe provider's systems are Y2K ready. But it is an indication that the provider has taken a critical 
and necessar>' step toward full Y2K compliance. 
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Providers Must Make Sure Their Billing Systems are Compliant 

HCFA wants to ensure there is no disruption to the billing processes or the cash flow between Medicare 
and its health care deliver}- partners in the new mtllminium. HCFA has already readied its systems to be 
able to receive compliant claims. In order to guaranty the seamless processing of claims, however, 
providers also must prepare their systems to submit compliant claims well in advance of Januaiy 1 . 2000. 
Medicare providers were instructed to begin submitting claims with 8-digit date formats no later than 
January 1, 1999. HCFA recognized that many providers needed additional time to modify and test their 
own billing systems and, therefore, allowed extra time before returning non-comp!iant claims to 
providers. 

On January 13, 1999, HCFA notified Medicare intermediaries and carriers that, beginning April 5, 1999, 
it Will no longer bs able to accept claims submitted by providers unless claims are submitted in a Year 
2000 compliant format. On February 1, 1999. the M^icare contractors issued bulletins to all providers 
detailing this April 5. 1 999, compliance deadline. Giving notice to providers two months in advance of 
the deadline will allow those who ha%x not yet been submitting compliant claims sufficient time to 
complete any outstanding renovations to. and testing of. their billing systems. 


Notifying Providers of This Change 

In the Spring of 1998. HCFA began issuing guidance through numerous instructions to the Medicare 
contractors and provider community on how to begin preparing their billing systems for the Year 2000. 
Providers were notified of effective dates for submittii^ Year 2000 compliant claims — October i. 1998 
for paper claims, and January 1, 1999 for electronic claims. 

• HCFA also took or is taking the following additional actions to ensure that the providers and 
suppliers are fully educated about their responsibilities. 

• instituted system for tracking die number of Fnoviders/suppliers or claims submitters (i.e.. billing 
services and clearinghouses) submitting Year 2000 compliant electronic claims and those who are 
not •• an important tool for identifying and assisting providers that are having difficulty pref^ing 
their systems. 

• Established a Y2K speakers' bureau, staffed HCFA personnel around the country, who are 
prepared to speak a! events and offer guid^ce. 

• Publishing a notice in the February 4. 1 999 Federal Register to alert HCFA's health care partners 
to their responsibility to become Y2K compliant, announce the technical assistance that HCFA 
has provided through its website and speakers’ bureau, and underscore the necessity to ensure that 
billings are compliant prior to April 5, 1999. 

• Held, and continues to hold, meetings and conferences throughout the country with major 
organizations, including the American Medical Association, the American Hospital Association, 
and other national provider groups and vendors to share information on Year 2000 issues. HCFA 
has reached thousands of providers through meetings, speeches, and other public events. 

• Distributed Year 2000 educational materials on the Internet and by mail to i^viders nationwide. 

Making Progress, But Work Remains 

Preliminary' data indicate that Medicare's work with the provider community is paying off. but that more 
work needs to be done. As of the end of December 1998, Medicare carriers reported that approximately 
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96 percent of Medicare Part B claims submitters that biJl electronically (billing services or the providers 
themselves) are already doing so in a compliant, 8-digit date manner. About 33 percent of Part A claims 
submitters (institutional providers such as hospitals, skilled nursing facilities, and home health agencies, 
or their billing services) are submitting claims in a compliant. 8-digit date manner. We expect more 
progress in the coming months. HCFA will continue to work with its health care deliver}' partners to 
educate them about their Y2K obligations, share information, and monitor their progress. 


Footnote; 1 - A doctor, hospital or other health care provider or supplier, upon furnishing service to a 
beneficiar}', does not actually bill HCFA directly. Instead, the provider or supplier (or. as is often the case, 
the billing service with which the provider/supplier contracts) submits a claim for reimbursement to one 
of the more than 60 private insurance companies (intermediaries and carriers) with which HCFA contracts 
to process claims. Claims processing includes determining the patient's eligibility for Medicare, whether 
the rendered service is covered by Medicare, and the correct amount to be paid to the provider for the 
service. The contractor pays the provider or supplier via a paper check or through electronic funds 
transfer, and sends a "Medicare Summary Notice" or "Explanation of Medicare Benefits" to the 
beneficiary informing them of the claim's disposition. 


3-8 


96 


Model Vendor Inquiry Letter and Software 
Vendor Checklist 


The following mode! business letters are reprinted with permission from y2K Experts and are 
provided to assist members in querying their vendors and others regarding Y2K compliance. 
These generic letters should be adapted to the practice's specific needs and reviewed by legal 
counsel for conformity with jurisdictional requirements in the area where the practice is located. 

Listed below are the sample letters provided in this guide: 

Hardware Vendor (PCs Purchased After 1994) - First Contact 
Hardware Vendor (PCs Purchased After 1 994) - Follow-up 

Software Vendor - First Contact 
Software Vendor - Follow-up 

Software Vendor Cbecklist 

A full listing of form documents available from Y2K£xperts can be viewed at: 
www.y2kexpetts.com/certiSed v2k teady/fotmdocuments.han 


*Flcase Note 

If you make any changes to the documents before sending them, be sure to involve marketing, 
technology and legal professionals. Even subtle changes can impact the effectiveness of the 
documents. 
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Hardware Vendor (PCs Purchased After 1994) - First Contact 
[date] 


[contact name, if applicable] 

[company name] 

[address] 

[city, state, ZIP] 

[country, if applicable] 

Dear Sir or Madam [or eontact name]: 

The year-2000 eomputer date problem (description enclosed) has received much press of late, 
and our customers have begun to question our ability to provide uninterrupted services up to and 
beyond the year 2000. As a result, we have begun the process of reviewing all of our internal 
eomputer systems and correcting all problems. During an evaluation of the computers we 
reeently purchased from your company (list enclosed), we found that several could not correctly 
process dates later than 1 999, and that our warranty periods expired. 

The computer industry estimates the useful life of a personal computer to be around five years. 
Your systems were built with design flaws - they can’t process beyond December 31.1 999 
without errors - that will surface after the warranty periods expire, but before the expected, 
useful life of each computer expires. Had we been informed of this design flaw when we 
purchased the computers, we would have purchased our machines elsewhere. 

We expect these computers to be fixed in a timely manner and without additional charges to our 
company. Please contact us within three weeks of the date of this letter, so that we may schedule 
the maintenance, before this flaw causes systemic damage to our business. 

Sincerely. 


[executive name] 

[title (preferably a CEO, CFO. CTO. president or partner)] 
enclosures 
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Hardware Vendor (PCs Purchased After i994>- Follow-up 


[date] 


[contact name, if a[^licable] 

[company name] 

[address] 

[city, state. ZIP] 

[country, if applicable] 

Dear Sir or Madam [or contact name]; 

Our reco^ show that you did not to respond to our previous inquiry (copy enclosed) regarding 
the design flaw in the computers we recently purchased from your company. We must have your 
immediate response to this inquiry, because we cannot assure our custotims of our company’s 
year-2fl00 compliance until th^ hardware errors ate corrected. 

Y our failure to respond promptly to this inquiry is delaying our efforts of preparing our company 
for the year 2000. We have an iirunovable deadline, and we cannot afford delays such as this. We 
are prepared to involve our attorney if you do not contact us within two weeks of the date of this 
letter. 

Sincerely, 


[executive name] 

[title (preferably a CEO, CFO, CTO. laesident or partner)] 
enclosure 
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Software Vendor - First Contact 


[date] 


[contact name, if applicable] 

[company name] 

[address] 

[city, state. ZIP] 

[country, if applicable] 

Dear Sir or Madam [or contact name]: 

The year-2000 computer date problem (description enclosed) has received much press of late, 
and our customers have begun to question our ability to provide uninterrupted services up to and 
beyond the year 2000. As a result, we have begun the process of reviewing all of our internal 
computer systems and correcting ail problems. 

We are currently using the software products described on the enclosed checklists and have come 
to rely on them to conduct our daily business. To guarantee uninterrupted service to our 
customers, we require your assurances that these products are Y2K-Ready (can function without 
errors up to and beyond the year 2000). 

Since many of our software products trade information, and since there are multiple methods 
used to create Y2K compliance, we face an additional problem. We need to know that the 
methods used to create Y2K compliance in your products are compatible with the methods used 
in other products at our company. 

Because of the nature of this problem and the short amount of time remaining to prepare our 
business to survive the year-2000 date change, we are not interested in receiving a canned 
response to this inquiry. Instead, we’ve enclosed a Y2K checklist for each of your products in 
use at our company. Please complete each checklist and return it to the address shown within 
three weeks of the date of this letter - our customers will not wait long for our assurances; 
therefore, we cannot afford to wait long for yours. 

Sincerely. 


[executive name] 

[title (preferably a CEO. CFO. CTO, president or partner)] 
enclosures 
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Software Vendor - Follow-up 

[date] 


[contact name, if applicable] 

[company name] 

[address] 

(city, state, ZIP] 

[country, if applicable] 

Dear Sir or Madam (or contact name): 

Our records show that you did not respond to our previous inquiry (copy enclosed) regarding the 
year-2000 compliance status of your software product(s) described therein. 

Your delay in providing the information we need is unacceptable and is costing our company the 
critical time is needed to complete our year-2000 project. In addition to facing an immovable 
deadline, we have customers that ate demanding our response to their year-2000 questions. We 
risk losing customers over this issue and will not tolerate further delays ftom your company. 

Please fill out the checklists that we once again have provided, and return them to the address 
indicated. If you fail to complete each checklist in its entirety and return it to us within two 
weeks of the date of this letter, we will be forced to consider alternative software products, and 
possibly involve our attorney in this matter. 

Sincerely. 


(executive name] 

[title (preferably a CEO. CFO. (TTO, president or parmer)] 
enclosures 
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Software Vendor Checklist 


The purpose of this document is to gather the information we need for performing a successful 
evaluation of your software's compliance to year-2000 (Y2K) standards, and for identify'ing its 
ability to successfully integrate into our computing environment. You must give a detailed 
response to each checklist item. If needed, attach separate documentation. 

We use “Y2K-Ready” throughout this checklist to mean “capable of processing dates and date 
calculations up to and beyond the year 2000 without errors.’* The currentl}’ installed software 
product in question is: 


Product Name: 


Version Number: 


Release Date: 


Vendor/Manufacturer: 



1 . Is the product Y2K-Ready? (If yes, proceed to question 6.) 


2. When will the product be Y2K-Ready? 


3. Provide the following information for the Y2K-Ready version of the product: 


Product Name: 


Version Number: 


Release Date: 


V endor/Manufacturer: 



4. Will there be charges associated with the upgrade to the Y2K-Ready version of the product? 

I I Yes ) I No I 

If yes. provide the list of charges and any conditions that apply. 


5. Indicate upgrade path, timing, etc., to the Y2K-Ready version of the product. 



14 
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Y2K-Ready Product 

6, What method is being used to process dates? (e.g., centur> portion of date added to file. 1 00- 
year range altered)? Be specific. 


7. if “windowing” {100-year range altered) has been used, what is the pivot date (date that 
controls the century cal culation)? 

I I 

S. Has the pivot date been hard-coded, or is it alterable by the end-user? 

I I Hard coded | | Alterable | 

9. Does the product rely on any date-sensitive programs not written by your company? (If no. 
proceed to question 1 1.) 


I I Yes 1 I No I 

10, For each of these programs, list the following; 


Product Name; 


Version Number: 


Release Date: 


V endor/Manufacturcr: 


Y2K-Ready? 

[Yes 1 [TIo 



Included in installation? 



1 1 . When product is installed, will the installation routine overwrite any common routines or 
programs (such as DLLs or APIs) that may have been supplied with the operating system or by 
another vendor? (If no, proceed to question 14.) 


I I yes I I No I 

1 2. For each of the routines or programs that will be overwritten, list the following: 


Product Name: 


Version Number: 


Release Date: 


Vendor/Manufacturer; 


Y2K-Ready? 

fYd^ 1 [nS 
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13. For each of the routines or programs that will be overwritten, describe the method used to 
ensure that overwriting these routines or programs will have no adverse effects on other software 



14. Does the product rely on the computer s system date for any fiinctionality? 


I I Yes I I No I 

15. List any other pertinent facts about your product that you feel may be helpful in our efforts to 
bring our systems up to Y2K compliance. 


16 





MEDICAL DEVICES COMPLIANCE 



105 


Medical Devices 

4 - 1 Intro Statement from the HHS Biomedical subcommittee 


4-4 Y2K and Biomedical Equipment 


4-9 Year 2000 Preventative Liability Maintenance Countdown 

Provided by Ober, Kaler, Grimes & Shriver Attorneys at Law 


Other Resources 

• “The Year 2000 Problem: Guidelines for protecting your patients and 
practice” This guide was produced by the American Medical Association 
and can be accessed by ACP-ASIM Members at: 
http://www.acponline.Org/private/y 2k/anamanue,pdf 


• FDA Year 2000 web site 

www.fda.KOv/cdrh/yT2000/year2000.html 
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Biomedical Equipment Subcommittee 
Purpose and Action 

Gayle Finch, Chair 

Department of Health and Human Servces 
Health Care Financing Administration 


Background 


Estabiishment and operation of the subcommittee 

The Biomedicat Equipment Subcomminee of the CIO Council’s y2K Committee was established 
in June 1 997. Within HHS, the FDA plays the lead operational role, but other health related 
agencies (HCFA, NIH. CDC, HIS) are also concerned about the implications of biomedical 
equipment for patient health and safety. Odier key participants include the Dqtartment of 
Veterans Affairs and the Depaitment of Defense. We ate also working with the National Patient 
Safety Partnership, a consortium of medical professional associations, in an advisory capacity. 
The Subcommittee also reports to and meets with John Koskinen bi-weekly. 

Issuance of a data request to the manufacturing community 

Following consultation with the Health Industries Manufacturing Association, the Medical 
Device Manufacturers Association, and the Health Equipment Manufacturers Association, the 
Subcommittee worked with the Office of Mam^emem and Budget regarding the issuance of a 
letter requesting infomiation r^arding the Y2K compliance of medical devices and scientific 
laboratory' equipment. This letter was signed by Deputy Secretary Kevin Thurm on January 21. 

1 998. and mailed to alt medical device manufacturets and approximately 3.000 manufacturers of 
scientific laboratory equipment 

The results from the survey were disappointing. Only about 10% of the 16,000 manufacturers 
had responded at the expiration of the initial reponii^ period. Ultimately, the FDA decided to 
focus on the approximately 2000 manufacturers who make products containing electronic 
components and who therefore are Y2K vulnerable. We have now received responses from 
approximately two-thirds of these manufacturers. The FDA and HIMA are contacting the test, 
but believe tlrat most of these firms do not manufacture products with date routines. 

All of the responses to the letter, several follow-up letters, and the publication of the names of 
non-respondents have been posted on the FDA website located at vww.fda.goviitml. The initial 
posting contain specific information about non-compliant product status, or a certification that all 
of the manufacturer's products are compliant. 


4- I 



107 


Of the 1,491 manufacturers who reported products that use dates. 59% report no date problems 
and 49% report one or more products with a date-related problem. 353 manufacturers describe 
784 products with date problems, but are still asse^ing their products (so this total could 
increase). 


Current activities 
The existing data base 

The data base can be used to determine product status as provided by the manufacturer and to 
compare the information in the data base against information provided via web site or other 
means from health care facilities. The user can also print listings, and download the data base. 
The description of the type of product and the description of the problem are often inadequate, 
and there is no search capability for "type of product" or "specific model." Finally, compliant 
products are not listed. 


Improvements to be made 

Current activities focus on recommendations made by the National Patient Safety Partnership for 
the expansion of the content of the FDA data base to improve its functionality, and thereby its 
utility to users. 

These recommendations include the posting of all compliant Y2K vulnerable devices, the 
inclusion of manufacturer name, a generic description of the type of product, and the specific 
model name and number. The partnership has also recommended the inclusion of an explicit 
statement of how the solution will be implemented, and whether the manufacturer or the owner is 
responsible for the cost of repair or replacement. Additional recommendations include a standard 
way to describe the type of product (e.g., the FDA classification names or the Emergency Care 
Response Institute names). The FDA has agreed to implement these recommendations. 

The only recommendation to which the FDA has only agreed in part concerns testing protocols 
and specific tests used by manufacturers to verify compliance. Since the FDA does very little 
product testing (under Federal law, the FDA tests certain equipment for levels of radiation 
emissions in medical devices), they have agreed only to provide a point-of-contact to supply 
testing information. 


Implications for health care providers 

Health care providers should use the FDA web site as a resource, but absolutely must deal with 
their suppliers on the equipment that they own and operate. Nothing can replace the 
customer/supplier relationship. 
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Manufacturers must compile a complete inventoty of their medical devices and scientific 
laboratoiy equipment and vigorously pursue remediation. In addition, they must ensure that their 
systems are tested end-to-end. where possible (e.g., a system which includes information 
technology as well as medical equipment with embedded chips.) 

Many manufacturers have posted to the FDA web site, and we thank them for doing so. 
However, where manufacturers have failed to report - and we emphasize that we think that 
feilure to report indicates an unacceptable level of due diligence - the provider can be left high 
and dry by its suppliers. All providers must have contingency plans that include alternative 
suppliers, especially since some products may be declared obsolete, compliant versions are 
unavailable, or the product is back-ordered. 

Only the providers that make a very highly proactive stance on Y2K remediation are likely to 
achieve Y2K compliance for their medical devices and scientific laboratoiy equipment. It pays to 
be aggressive. 


Cenclusions 

• Providers must develop thorough Y2K remediation plans, and medical equipment must 
be a key facet of the plan. 

• Providers must develop contingency plans in case your current suppliers are not ready, or 
do not have similar, compliant products in stock. 

• Providers should use the FDA web site, and links to that web site, to augment your 
existing supplier information. 

• Providers must protect the quality of care and patient safety by ensuring that they become 
totally Y2K ready. 
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Y2K AND BIOMEDICAL EQUIPMENT 

Gayte Finch 

Director. Division of Information Analysis and Investment 
Department of Health and Human Ser\'ices 
Health Care Financing Administration 
GFinch@HCFA,GOV 
410-786-8024 


Establishment and Operation of The Biomedical Equipment Subcommittee 

• Established in June 1997 to safeguard patient health and safety by ensuring Y2K compliance 
of medical devices and scientific laboratory equipment 

• HHS. DoD, and V A are the major Federal players 

• National Patient Safety Partnership provides advice to the Subcommittee 

• Reports to John Kosidnen 


The FDA’s Role in Medical Devices 

• Conducts pre-market review of new products 

• Conducts Manufecturing Oversight under the Quality System Regulations 

• Conducts post-market surveillance and medical device reporting 

• Conducts public health activities 


FDA Authority for Problem Products 

• The FDA can take action to require a product recall when the product presents an 
unreasonable risk of substantial harm to the public health” 

• FDA will monitor reports of Y2K problems with emphasis on devices that could present 
significam risk to patients, and investigate and take action where warranted 
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What Have HHS/FDA Done Regarding this Y2K issue? 

• Issued a Januar>' 199* letter ftom the HHS Deputy Secretary announcing the establishment 
of the Biomedical Equipment Data Base and asking for compliance information 

• The FDA has issued several follow-up letters 


What Have HHS/FDA Done Regarding this Y2K Issue? (cont) 

• The FDA has also issued letters to manufacturers on manufacturing processes 

• HHS and FDA plan additional communications outreach with manufacturers, health care 
providers, and consumers 


The Biomedical Equipment Data Base 

• FDA-operated world wide web site — WWW.FDA.GOV (select the Year 2000 item) 

• Data provided by manufacturers 

• V oluntary submission of data 

• “Certification” by manufacturers 

• Continually updated 

• Searchable by manufacturer 

• “Downloadable” 


Data Base Content 

• Lists Y2K non-compliant products 

• Manufacturer certifies all products are compliant 

• Manufacturer certifies that none of their products use dates 

• Manufacturer provides a link to their web site where information is posted 


HHS/FDA Get T ougher 

• FDA issued a September 2. 1998 letter to manufacturers with probability of computer usage 

• Asked manufacturers to submit information 

• Requested report on assessment work 

• Warned that non-respondents would be publicly identified 
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Y2K Compliance Definition 

• Y2K compliance is defined as: the product accurately processes and stores date/time data 
(including, but not limited to. calculating, comparing, displaying, recording and sequencing 
operations involving date/time data) during, from, into, and between the 20th and 2 1 st 
centuries and the years 1999 and 2000. including correct processing of leap year data 


What Does the Data Base Reveal? 

• Response rates are disappointing; companies may still be assessing 

• Most non-compliant products involve “date stamping” 

• A limited number of products have significant operational problems 

• PC products have “PC” type problems 

• Manufacturers are providing a variety of solutions 


Manufacturers Responsibilities Under the Law 

• Report problems with devices 

• User facilities, as well as manufacturers, may report problem devices 

• Reports of corrections and removals to address a risk to public health 


The Existing Data Base 

• Users can determine product status as provided by the manufacturer against information 
provided via other web sites or health care bcilities 

• The user can search on manufacturer ruune, print listings, and download the data base 


Data Base Improvements to be Made by the FDA 

• The FDA will provide information on “compliant” as well as “non-compliant” products, 
including manufacturer, product description, and model name/number 

• Improved product and problem descriptions 

• Explicit statement of how solution will be implemented (manufacturer or owner 
responsibility) 
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Data Base Improvements to be Made by the FDA (cont) 

• Capability to search by “product type" or by model name or number 

• Standardization of nomenclature 

• The provision of a testing point of contact 

• The provision of a manufacturer genealogy to document mergers and acquisitions 


Implications for Providers 

• The FDA data base and other web sites are valuable, but nothing can replace the customer- 
supplier relationship 

• Providers must compile a complete inventory of their biomedical equipment and aggressively 
pursue the acquisition of manufacturer certifications for all products 


Implications for providers (cont) 

• Providers must ensure their systems are tested end-to-end, including networks consisting of 
both IT and medical equipment 

• Providers should have contingency plans that include alternative sources of supply in case 
manufacturers won’t provide information 


Testing 

• Each provider must make its own decision whether certification is sufficient 

• You may be able to convince your suppliers to test their own equipment, or to help you test 
with manufacturers’ representatives on site, if you are a large facility 

• If you decide to test yourself, be aware that you could off-load liability from the 
manufacturer to your facility 

• Weigh the costs and benefits of testing carefully 
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SUMMARY 

• The FDA and other Y2K data bases are helpful, but nothing can replace the customer - 
supplier relationship 

• Weigh the costs and benefits of testing decisions, including issues of liability 

• Ensure that your systems are assessed and remediated with time to spare 

• Develop contingency plans in case of system failure 
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The following information was provided by: 

Ober, Kaler Grimes & Shriver, Attorneys at Law 

120 East Baltimore Street • Baltimore, MD 21202-1643 


YEAR 2000 PREVENTATIVE LIABILITY 
MAINTENANCE COUNTDOWN 


Y2K • A legal audit can help to protect health care providers 
from Year 2000 failures and liability. 

by 

Jerald J. Oppel, Esquire Rachel B. Korsower, Esquire 

Jjoppei^f^r.com rbkorsower(S>ober.com 

4 1 (^ 347-7338 4 1 0 - 347-7375 


Who is responsible for ensuring that your patients on ventilators will still be breathing at 
12:01AM, Januaiy 1st, 2000? 

Who is responsible for ensuring that your patients on the operating table are not over- 
anesthetized. under-anesthetized or even not anesthetized at 12:01AM, January 1st, 20007 

Who is responsible for ensuring: 

that your drug distribution systems are still dispensing and tracking medications 
correctly; 

that your patient who fell and is lying on her kitchen floor with a broken hip gets through 
to the health care provider when she pushes the emergency call bunon; 

that your infusion pumps are properly recalibrated by embedded recaiibration twisters: 

that your Holier monitors are providing reliable date and time stamping; and 

that your blood mixer is still accurate at 12:01AM, January 1st, 2000? 

With the next millennium fast approaching, litigation has already started across the countty 
regarding responsibility to make equipment and software compliant for the Year 2000 (Y2K).' 
In one such case, after being faced with eight class action suits alleging violations of the New 
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Jersey Unfair Trade Practices Act for failing to disclose the lack of Y2K compliance. Medical 
Manager Corporation of Tampa, Florida recently settled out of court. According to the terms of 
the settlement, the corporation agreed to provide each of its approximately 1 2.000 purchasers of 
the non-Y2K compliant medical software a free upgrade, saving them more than $30 million. In 
addition, the corporation will be reimbursing those who have already paid for the upgrade, and 
will be paying a total of $1 .5 million in legal fees and cash settlements. 

While upgrading software and equipment is being addressed now, courts have not yet given 
guidance on the allocation of liability among health care providers, manufacturers, insurers and 
others in the event of an injury or death caused by a Y2K failure of a biomedical device, as it is 
at least a year before any such case could be filed. There are numerous potential causes of action 
for such a scenario, including agency enforcement actions, medical malpractice, personal injury, 
wrongful death, misrepresentation, fraud and breach of officers" and directors' fiduciary duties. 
Furthermore, many insurance policies will not cover losses due to Y2K failures for any of a 
number of reasons, including foreseeability of loss. 

The federal government and many states are in various stages of drafting legislation which would 
clarify and/or limit liability issues regarding Y2K failures and which might ultimately provide 
binding direction in distribution of responsibility." Pre-filed Maryland House Bill 8 was just 
introduced on January 13. 1999. While it is unknown whether this proposed bill will eventually 
pass, it would provide affirmative defenses to governmental entities and others who. in general, 
act with due diligence or with the standard of care required normally of directors under current 
Maryland law, in the absence of explicit contractual provisions dealing with this issue. 

In the meantime it is important to determine as soon as possible what steps need to be taken to 
minimize both the risk of harm to patients and the risk of liability exposure. Having counsel 
conduct a thorough legal audit and implementing a preventative liability maintenance plan are 
crucial in this process. 


WHO IS RESPONSIBLE FOR TESTING AND CERTIFYING THAT 
BIOMEDICAL EQUIPMENT IS V2K COMPLIAJVT? 

Whether a health care provider should rely on a manufacturer’s certification of Y2K compliance 
or whether the health care provider should also perform independent tests to confirm Y2K 
compliance is a key issue in conducting a legal audit and implementing a preventative liability 
maintenance plan. 

There is no clear answer to this question because the current regulatory environment for Y2K 
issues is in flux and evolving. At this lime, research reveals non-binding authority for both 
approaches. On the one hand, the United States Department of Health and Human Services 
(HHS). the Food and Drug Administration (FDA) and the Veterans Health Administration 
(VHA) rely on the manufacturers of biomedical equipment to validate, test and certify that 
equipment is Y2K compliant.'" Many legal and journal commentators concur with this approach. 
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On the other hand, the General Accounting Office (GAO) and American Hospital Association 
(AHA), as well as others, suggest that health care facilities also test biomedical devices and 
systems themselves.*^ 

On June 24. 1998, the FDA issued “Guidance on FDA*s Expectations of Medical Device 
Manufacturers Concerning the Year 2000 Date Problem.’’' indicating that manufacturers should 
be responsible for ensuring compliance because “only the manufacturer has the detailed 
knowledge of the design of specific devices that is required to effectively evaluate the potential 
for risk to patients.”*'* Furthermore, “[u]nder the Quality System Regulation (21 C.F.R. part 
820), device manufacturers must ensure and document the quality of their design and 
manufacturing processes. This regulation places a continuing responsibility on manufacturers to 
investigate device malfunctions and to prevent potential malfunctions, including those that could 
be caused by incorrect processing or recording of dates."’’* In addition, the FDA has an on-line 
national clearinghouse which lists voluntary responses to its requests for Y2K compliance status 
from some manufacturers at “www.fda.gov/cdrh/yr2000/year2000.htmr'. Just recently 
responses to the VHA’s requests for compliance status were included in the FDA clearinghouse 
as well. 

According to the GAO Report, the VHA also decided to rely on manufacturers’ Y2K 
certifications because some manufacturers stated that manipulating the embedded software may 
void their certification to the FDA that the equipment is safe for patient use. This would then 
expose the VHA, or any similar entity that perfonmed tests, to leg^ liability should the 
equipment later malfunction and harm a patient.'"'* A few weeks ago the VFIA published on the 
Internet The Year 2000 Medical Device Assessment: Guidebooks stating that the original 
equipment manufacturer should be the primary source for compliance information because: 

No other source, or combination of sources, can provide device- 
specific information while simultaneously ensuring proper and 
thorough testing. The manufacturer is the only source of design 
data regarding time and date usage; this proprietary information is 
unavailable to end users including biomedical engineering staff 
Testing these devices can easily be incomplete, destructive, or 
inaccurate through no fault of the tester or its devised protocol. 

Testing has the potential to harm patients through inadvertent 
changes in internal settings that are not viewable or easily reset by 
a biomedical technician." 

In contrast, the recent GAO Report recommends that the Secretary of Veterans Affairs, the 
Veterans Affairs’ Under Secretary for Health, the Secretary of Health and Human Services and 
the Commissioner of the Food and Drug Adminisuation "take prudent steps to review the test 
results for critical care/life support biomedical equipment, especially equipment once determined 
to be noncompliant but now deemed compliant, and that for which there are concerns about the 
determination of compliance, and make the results of these reviews publicly available through 
the single data clearinghouse.”' The GAO Report further recommends that these agency 
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officials “determine what legislative, regulatory, or other changes are necessary to obtain 
assurances that the manufacturers' equipment is compliant, including performing independent 
verification and validation of the manufacturers' certification.'' 

The VHA's response to this report is that it lacks the legislative or regulatory authority to 
implement such a recommendation and that HHS should be responsible for such actions. HHS' 
response is that submission of appropriate compliance certification by the manufacturer is 
sufficient and that it lacks adequate resources or time to complete this type of review.'*' 

Similar to the GAO, the AHA suggests that a health care facility should test every system itself 
The AHA also notes that individual units of the same make and model may produce different 
Y2K compliance results because individual microchips may have been manufactured by 
different suppliers or at different times.*" 

Associate Director Britton Berek in the interpretation unit of the Joint Commission on 
Accreditation of Healthcare Organizations (JCAHO) has said that JCAHO does not have a 
specific standard regarding the responsibility for testing of biomedical devices for Y2K 
compliance. While JCAHO is very concerned about biomedical equipment compliance being 
addressed in a health care facility’s plan, JCAHO does not mandate a specific approach to 
biomedical equipment testing. However, Mr. Berek indicated that JCAHO surveyors will be 
addressing Y2K compliance issues during 1999 in the context of existing standards. According 
to JCAHO’s Inside Perspective, “[sjurveyors will ask you whether your organization is engaging 
in efforts to identify its Y2K vulnerabilities; upgrade software programs and equipment to make 
them Y2K compliant; identify corrective manual alternatives when necessary; consider possible 
community disaster scenarios related to Y2K in your emergency preparedness planning; and 
develop contingency plans to handle Y2K disruptions that are not identified ahead of time or are 
outside the organization’s control.’’"'" 

While there are proponents for each of the two approaches to testing, a number of additional 
factors should be taken into consideration as well, including: 

• whether a manufacturer provides a certification at all; 

• the scope of certification provided; 

• the terms of any contract, license agreement or maintenance agreement with each 
manufacturer, particularly warranty, intellectual property and confidentiality 
provisions; 

• the potential threat of harm posed by the failure of each biomedical device; and 

• the cost and feasibility of replacing a panicular biomedical device. 

Each of these factors is discussed below. 
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Manufacturer Response 

There are a variety of possible manufacturer responses, including: 

1. The equipment is V2K compliant. Even if a manufacturer provides a 
certification that the equipm«il is Y2K compliant, it is important to evaluate the 
scope of each certification, as discussed below. 

2. No response at all. Some manufacturers refuse to respond. Others cannot be 
located, and some have gone out of business. 

3. A response which does not certify. For instance, some manufacturers merely 
state an awareness of the problem and indicate they are working on it. Others state 
that the compliance status of an item is still pending. 

4. The equipment is noD-Y2K compliantt but an upgrade is available. The cost 
to upgrade equipment and/or software may vary widely. Examples can range 
from zero to six figures. Whether you, the manufacturer or vendor should pay for 
this upgrade depends on a careful review of the contract terms and conditions. 

5. The equipment is non-Y2K compliant, and no remedy is available. If a 
manufacturer provides this type of evaluation, the equipment may be worthless by 
the Year 2000, or there may ^ a way to work around the problem. Depending on 
the situation, a health care facility may have to make other arrangements or 
purchase replacement equipment. 

Scope of CertlHcation 

Even when a manufacturer certifies that its equipment is “Y2K compliant,” there are varying 
levels of assurances - fiom the very general and not so reassuring, to the very specific and much 
more reassuring. For instance, a certification may: 

• refer only to general indications of Y2K compliance; 

• refer to the general Y2K compliance of a manufacturer's entire product line; 

• indicate that certain products have been tested and are compliant; or 

• indicate that a particular item has been tested in a certain way and is compliant. 

It should be noted as well that while a certification may be provided with a veiy high level of 
assurance, skeptics insist that some of the information is ncverlheJess unreliable,**' 

There are also different definitions of the meaning of *‘Y2K compliant.” As an example, the 
FDA defines “Year 2000 Compliance” to mean that: 
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with respect to medical devices and scientific laborators equipment, that the product 
accurately processes and stores date/time data (including, but not limited to calculating, 
comparing, displaying, recording and sequencing operations involving date/time data) 
during, from, into and between the twentieth and twenty-first centuries, and the years 
1999 and 2000, including correct processing of leap year data. 

The above definition is a slight modification of the definition of “Year 2000 
Compliance” as used in the Federal Acquisition Regulations for information 
technology products to address medical devices and scientific laboratory' 
equipment 


(see 48 CFR Part 39.002). The intent is that for products to be Year 2000 
compliant they must function as intended or expected, regardless of the date.”' 

However, each manufacturer may respond to a Y2K compliance request with its own 
interpretation of what it means for a biomedical device to be “Y2IC compliant.” This lack of 
consistency should be taken into account when evaluating each certification. 

Contractual Terms 

Your health care facility will have specific contractual warranty, intellectual property and 
confidentiality provisions with each manufacturer. These provisions may constrain the right to 
test for Y2K compliance, as discussed below: 

1. Warrantict - Tampering with a biomedical device in order to conduct Y2K 
testing may invalidate a manufacturer's warranty, depending on factors such as 
the purchase or sales contract, license agreement and maintenance agreement. 

2. Intellectual property - If a health care facility does not own the rights to 
particular software, tampering with it may infringe on the owner's proprietary 
rights or may constitute a breach of the license agreement. 

3. Confidentiaitty - Allowing a drird party to access software may breach 
confidentiality obligations contained in the license agreement. It may also expose 
a health care facility to liability for misappropriation of trade secrets. 

While you should be aware of these issues, there may be legal obligations, remedies and 
defenses for proceeding with testing anyway, which counsel can analyze. 

Risk of Harm 

Ever) health care facility has its unique inventory of biomedical devices. In order to effectively 
prioritize, each machine should be individually evaluated to determine the potential harm to 
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patients and others the item were to malfunction. Research reveals that equipment such as apnea 
monitors, defibrillators, fetal monitors, image-guided surger)’ systems and infusion pumps are 
examples of high-risk equipment; absorptiometcrs, ambulatory ECG recorders and scanners, 
blood gas/pH analyzers and medication management units are examples of medium-risk 
equipment; and audiometers and diathermy units are examples of low-risk equipment.” ' 

Replacement Cost 

Replacement of certain items may be the safest option, although the cost of each item may also 
vary widely. However, at this late date, there may be practical obstacles involved in replacing 
certain devices and equipment such as a lack of availability by the year 2000, or the lack of 
resources to train the professionals needed to operate the item, 

WHAT IS A HEALTH CARE EXECUTIVE TO DO? 

It is essential that every health care facility undergo a Y2K legal audit. In die event that your 
facility has not already undergone an audit, counsel can prove invaluable in assessing your 
institution's current strengths and weaknesses. While recognizing that it is late to be starting this 
process now, 

there is still almost one year to implement and/or continue preventative measures. Issues counsel 
can address include: 

• advice with regard to making an inventory of all biomedical devices; 

• review of all contracts, license agreements and maintenance agreements; 

• review of all outsourcing agreements; 

• review of any correspondence already received from manufacturers, suppliers, 
vendors, and those that service and repair the equipment, regarding 'V2K 
compliance; 

• review of all insurance policies; 

• review of any compliance plans already in place; 

> advice regarding documentation of Y2K compliance efforts; and 

• advice regarding contingency planning. 

If your institution does not already have a preventative liability maintenance plan, counsel can 
assist you with issues such as: 

• customization of the definition of “Y2K complianf ' to your specific health care 
facility, particularly for requests for certifications, responses to requests for 
certifications and contract negotiation: 

• drafting of leners to each manufacturer requesting Y2K compliance certification 
for each biomedical device used by your health care facility; 

• drafting of letters to all vendors, suppliers and those that service and repair the 
equipment requesting Y2K compliance certification for their companies; 
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• negotiation with manufacturers to make each biomedical device used by your 
health care facility Y2K compliant for as low a cost as possible; 

• creation of an individualized testing strategy for your health care facility; 

• selection of only those individuals and/or firms to test the equipment that 
specialize in Y2K testing and have an excellent reputation, as confirmed by 
references; 

• minimization of exposure vis-a-vis each manufacturer, software owner and 
licensor of equipment tested by the hospital; 

• negotiation to obtain source codes and testing recommendations, where possible, 
from each manufacturer, software owner and licensor of equipment tested by the 
hospital; 

• review of mechanisms to prevent loss of Y2K compliance status, i.e.. from later 
repairs or linkage to non-Y2K compliant systems; 

• negotiation of lire purchase of new equipment when necessary including 
iregotiation of allocation of responsibility for Y2K compliance: 

• negotiation of the purchase of additional insurance where necessary and feasible; 

• implementation of appropriate board of directors' resolutions; 

• implementation of appropriate measures to ensure written documentation of Y2K 
compliance efforts; 

• pursuit of all legal rights and ronedies. 

There are many other Y2K legal issues every health care facility needs to address as well. The 
following is a list of some of these issues: 

• advice with regard to the assessment of inventory and all systems throughout the 
facility that are (i) computer related; (ii) use software applications; (iii) have an 
embedded chip even though not readily tq^arent; and ^v) have non-embedded 
software fmt which are used to enhance dre operation of other devices; 

• responses to Y2K compliance requests; 

• Securities and Exchange Commission disclosures, where applicable; 

• completion of other regulatory disclosure and compliance requirements; 

• consideration regarding accounting and tax consequences; and 

• due diligence in conjunction widi a meiger. acquisition or other venture. 


CONCLUSION 

There are precious few days left before the next millennium begins and the Y2K compliance 
status of every device is asceitained for sure. Make sure your health care facility has minimized 
the risk of pment harm and minimized its liability e)qx>siare by exercising due care. Arrange for 
8 Y2K ieg^ audit and a customized preventative liability maimenance plan now. 
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Support Systems and Outside Vendors 

5 - 1 Compliance process 
5-3 Checking telephone systems 


5-5 Basic vendor inquiry form letters 


Links 


• www.y2kexperts.com - Additional vendor inquiry letters, etc. 

• www.year2000registry.com - Vendor compliance statements 
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Building Maintenance 

If you rent or lease space in a commercial building, you should contact the maintenance 
company immediately. If the elevators, securit)’ systems, fire protection systems, etc., fail to 
operate properly when 2000 rings in , you’ll be hurt just as badly as if your internal systems had 
crashed. These systems take time to modify, and if the maintenance company can't get done in 
time, you need to know now, so you can start planning your move. 

You might also consider treating your vendors much like you would your customers. Offer to 
help them overcome the Y2K crisis, and you may establish relationships that serve you well into 
the new millennium. 

* A portion of the information above came from; Certified Y2K Ready by Bill E. Wagner. 
President Y2Kexperts.Com 
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Compliance Process 

There are a wide range of outside parties with whom a medical practice has business 
relationships and whose Y2K readiness could affect the practice. Vendors supply products and 
services that could fail - the telephone system (See information later in this tab) being one of 
the most critical. Hospitals, labs, and others supply important services to the practice and al.so 
may exchange electronic data/reports that could corrupt the practice's computer system, or vice 
versa. The practice therefore should contact each organization that supplies critical products, 
services or information. Failure to ensure that they are Y2K ready could mean disaster for your 
practice. Use the HCFA checklist (from Tab 2) to identify all of the outside parties to contact. 

Due to the potential loss of business and legal implications, vendors and others may vary in their 
forthrightness on this issue. In most cases, assume you will be writing several letters to each 
party. A few basic model letters are included in this section or you can download other more 
specialized letters from the y2k experts web site: 
www.y2kexperts.com/certified_y2k_ready/fonndocuments.htm 
If vendors prove unresponsive, you may need to consider involving your attorney. 

Start writing vendors. You’ll need to give them time to respond to your requests for Y2K- 
compliance assurances. In many cases, it will take more than one letter and possibly follow-up 
phone calls to get a response. In addition, you’ll need time to replace the vendors whose 
products or systems will not be ready for the year 2000. (As a rule of thumb, if a vendor doesn’t 
reply after three letters, you’d better start looking for a replacement.) 

Keep paper copies of every letter or E-mail concerning Y2K - don’t rely completely on your 
computer system through this difficult time. Document the time and duration of, and individuals 
involved in. phone calls and meetings. Save every response. The more documentation you have, 
the better you'll be if you end up in a Y2K lawsuit 

Utility Companies 

Utility companies can be problematic, because, in many areas, there is only one option for a 
particular utility. If you receive no response (or a negative response) to your first letter, you 
should involve your attorney. You have two primary objectives: 

1 . Make sure the utility company is V2K-Ready. 

2. Position your company to recuperate losses and defend against lawsuits if service 
stops and hurts your business. 

In some instances (like electricity), you might consider using an independent backup system, like 
a generator. Of course, you’ll have to make sure the generator doesn't have a faulty Y2K 
microchip. And. if it’s a gasoline-powered generator, be sure that your local gas company will 
be capable of supplying fuel after January 1 , 2000, 
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The real problem is that your internal systems are just the tip of the iceberg. As you can 
imagine, the year-2000 problem is a significant challenge for the telecommunications industrv. 
Individual companies have millions of lines of code in their computer infrastructures that control 
areas such as order entry', call routing and billii^. They also have an untold amount of code 
involved in ancillary applications that may be critical to the service they provide your business. 

Because of the number of interconnected elements involved, international calls will be the most 
susceptible to problems. Consider this: When you place a call from Los Angeles to Munich, that 
call goes through dozens, if not hundreds, of telephone computers, all part of the Public Switched 
Telephone Network (PSTN). The only way to completely test a system is to test it end to end. 
Can you imagine the logistical nightmare of scheduling and performing that test throughout the 
PSTN? Companies around the globe would have to coordinate and synchronize a date change in 
their computer systems without interrupting normal business - an impossible task. And. if even 
on system at one of those companies can’t handle the year-2000 date change, your phone call 
will not connect. So, even if you know your PBX is compliant, you can never be sure the calls 
you place will go through on January 1, 2000. 

During the planning stages of your Y2K-compliance efforts, the one question you must ask 
yourself is this: “How long could we survive as a business without a dial tone?" Probably not 
very long. There are, however, ways to hedge your bet. For instance, you could: 

• Build your local client base. 

• Open branch offices close to your key customers. 

• Establish collaborative relationships with competitors {you support their clients in 
your areas; they support your clients in their areas). 

• Install backup copies of your website throughout the world. 

• Distribute your call center to multiple sites - limiting your exposure 

• Encourage carrier competition as a way to increase your available options. 

Within your specific business situation, you must weigh each option carefully to detennine your 
best course of action. 
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Checking Telephone Systems 

By Patrick K O’Brien 
Partner, Orbtech 

From: Cenified Y2K Ready 
By Bill E. Wagner, President Y2Kexperts.Com 

We tend to take the telephone for granted these days. Telephone carriers have done a good job 
of building a reliable public network, and this reliability has given us tremendous confidence in 
our communication systems. But, that's all about to change, because phone companies, like 
businesses everywhere, have neglected to address the year-2000 problem in a timely fashion. 

Beyond most communication systems (such as voice. E-mail. fax. paging and video) is a 
complex maze of thousand of interconnected computer systems around the world - all relying on 
date information. This makes them all susceptible to the year-2000 problem. Most businesses 
rely more heavily on their telephone systems, however, so that is where we will focus. 

Internal Systems 

The place to begin testing for Y2K-Readiness is your Private Branch Exchange (PBX). PBX 
systems are proprietary, so your best source for compliance information will be the equipment 
vendors themselves. Most of the larger vendors (such as Lucent Technologies, Inc., Nortel, Inc. 
and Mitel Corp.) have detailed which of their systems are Y2K-compliant and how to fix those 
that aren’t. Contact these vendors for the information you need. 

Next, consider the communication-related areas of your business that interact with your phone 
system: 

• Voice mail and E-mail systems 

• Cost accounting systems 

• Computer Telephony Integration (CTI) applications 

• Automatic call distributors 

• Interactive voice response systems 

• Call center software 

• Pagers and paging systems 

• Networking hardware and software 

• Internet connections 

Each of these falls under hardware, software or services. To determine their Y2K-compliance. 
you should follow the steps for testing hardware and contacting vendors outlined elsewhere in 
this guide. 

Global Systems 
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Noncomputerized-Product Vendor - First Contact 
[date] 


[contact name, if applicable] 

[company name] 

[address) 

[city, state, ZIP] 

[country, if applicable] 

Dear Sir or Madam [or contact name]: 

Our records show that you did not respond to our previous inquiry (copy enclosed) regarding the 
year-2000 compliance status of your software product(s) described therein. 

Your delay in providing the information we need is unacceptable and is costing our company the 
critical time is needed to complete our year-2000 project. In addition to facing an immovable 
deadline, we have customers that are demanding our response to their year-2000 questions. We 
risk losing customers over this issue and will not tolerate further delays from your company. 

Please frll out the checklists that we once again have provided, and return them to the address 
indicated. If you fail to complete each checklist in its entirety and return it to us within two 
weeks of the date of this letter, we will be forced to consider alternative software products, and 
possibly involve our attorney in this matter. 

Sincerely, 


[executive name] 

[title (preferably a CEO. CFO, CTO, president or partner)] 
enclosures 
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Basic Vendor Inquiry Form Letters 


The following model business letters are reprinted with permission from Y2K Experts and are 
provided to assist members in queryii^ their vendors and others regarding Y2K compliance. 
These generic letters should be adapted to the practice’s specific needs and reviewed by legal 
counsel for conformity with jurisdictional requirements in the area where the practice is located. 

Listed below are the sample letters provided in this guide: 

Nencomputerized-Produ^ Vendor - First Contact 
Noncomputerized-Product Vendor - Follow-up 

Property Manager - First Contact 
Property Manager- Follow-up 

Utility Company - First Contact 
Uttiity Company - Follow-up 


A frill listing of form documents available from Y2KExperts can be viewed at; 
>vww.y21cexiieits.com/certified y2k ready/fonndocumenls.htm 


‘Please Note 

If you make any changes to the documents before sending them, be sure to involve marketing, 
technology and legal professionals. Even subtle changes can impact the effectiveness of the 
documents. 
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Propert>' Manager - First Contact 
[date] 


[contact name, if applicable] 

[company name] 

[address] 

[city, state, ZIP] 

[country, if applicable] 

Dear Sir or Madam [or contact name]: 

The year-2000 computer date problem (description enclosed) has received much press of late, 
and our customers have begun to question our ability to provide uninterrupted services up to and 
beyond the year 2000. As a result, we have begun the process of reviewing all of our internal 
computer systems and correcting all problems. But, this is not enough. 

As a resident of the property located at [property description/address], we rely heavily on 
the systems that control elevators, heating and cooling, security, electricity, telephones, fire 
detection/prevention and all other essential functions. According to many experts, the computer 
processes that control systems such as these may be unable to correctly process after 1999. Since 
these systems are not under our control, we must rely on you to make sure that they are, or will 
be, capable of fimctioning without error up to and beyond the year 2000. 

Before we can inform our customers that we will have no year-2000-related disruptions in 
service, we must receive the following from you: 

• A list of all systems on the property that are controlled by computer. 

• Your assurances that each system will function properly, without a year-2000 date-related 
error. 

Our customers will not wait long for our assurances; therefore, we cannot afford to wait long for 
yours. Please respond to this inquiry within three weeks of the date of this letter. 

Sincerely, 


[executive name] 

[title (preferably a CEO. CFO. CTO, president or partner)] 
enclosure 
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Noncomputerized-Product Vendor - Follow-up 
[date] 


[contact name, if applicable] 

[company name] 

[address] 

[city, state, ZIP] 

[country, if applicable] 

Dear Sir or Madam [or contact name]: 

Our records show that you did not respond to our previous inquiry (copy enclosed) regarding the 
year-2000 (Y2K) compliance status of your company, and your ability to provide the product(s) 
upon which we rely. We must have your immediate response to this inquiry, because we cannot 
assure our customers of our own year-2000 compliance without it. 

To guarantee our customers uninterrupted service, we must use products supplied by vendors 
that are also Y2K-Ready. Please respond to this inquiry within two weeks of the date of this 
letter, or we will be forced to find another source for the produces) you provide. 

Sincerely, 


[executive name] 

[title (preferably a CEO, CFO, CTO, president or partner)] 
enclosure 
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Utility- Company - First Contact 
[date] 


[contact name, if applicable] 

[company name] 

[address] 

[city, state. ZIP] 

[country, if applicable] 

Dear Sir or Madam [or contact name]: 

The year-2000 computer date problem (description enclosed) has received much press of late, 
and our customers are questioning our ability to provide uninterrupted services into the nev/ 
millennium. As a result, we have begun the process of reviewing all of our internal computer 
systems and correcting all problems. But, this is not enough. 

Your company's ability to provide us with [utility type] is critical to our conducting our daily 
business. To guarantee uninterrupted service to our customers, we require your assurances that 
your company will be Y2K-Ready (able to deliver services, without interruption, up to and 
beyond the year 2000). 

Our customers will not wait long for our assurances; therefore, we caimot aiford to wait long for 
yours. Please respond to this inquiry within three weeks of the date of this letter. 

Sincerely, 


[executive name] 

[title (preferably a CEO, CFO, CTO, president or partner)] 
enclosure 
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[contact name, if applicable] 

[company name] 

[address] 

[city, state. ZIP] 

[country, if applicable] 

Dear Sir or Madam [or contact name]: 

Our records show that you did not respond to our previous inquiry (copy enclosed) regarding the 
year-2000 compliance status of your systems on the property(ies) described therein. 

We have had a good business relationship with you in the past and look forward to continuing 
that relationship. However, if your systems will not be capable of fiinctioning normally as a 
result of the year-2000 computer date problem, we must know that immediately. Changing 
locations will place a large burden on us and, if necessary, is a process that we must begin now. 

We must have your immediate response to this inquiry, because we cannot assure our customers 
of our own year-2000 compliance without it. Your failure to respond promptly to this inquiry 
may hurt the relationships we have with our customers and may damage our business. If you do 
not contact us within one week of the date of this letter, we will be forced to consider involving 
our attorney in this matter. 

Sincerely. 


[executive name] 

[title (preferably a CEO, CFO, CTO, president or partner)] 
enclosure 
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SELECTING A SOFTWARE SYSTEM: 
INFORMATION PACKET 

Updated March 1999 


Enclosed is your order for ACP-ASIM's Selecting a Software System information packet. 

This packet includes a list of directories of software products, resources for obtaining software 
evaluation tools, checklists and medical software reviews, plus informative articles and web sites 
pertaining to this topic. 

Also enclosed is ACP-ASIM’s guide, "Choosing The Right Computer System For Your Practice.” 
This guide lists steps to consider in planning and evaluating a computer system for your practice. 

In recent years, the medical practice software industry has undergone significant developments 
which will influence your choice of software: 1 ) consolidation of numerous smaller practice 
management software vendors into a reduced number of large national vendors, 2) substantial 
standardization of basic features offered by major practice management systems. 3) emergence 
of small network, off-the-shelf, practice management systems selling for under $2000, and 4) 
continuous advancement of electronic medical records systems to the stage where they now 
constitute a practical option for many private practices. 

The packet is designed to save you time in defining your primary software needs and then 
locating resources to help narrow the selection of products. Ultimately, however, you should talk 
with other users of the software in which you are most interested and ask for demonstrations of 
its performance using real data. 

We hope that this information proves helpful. You may also order our related “Electronic 
Medical Records Background Information” packet by calling ACP-ASIM customer service 
(800)523-1546 ext, 2600, or downloading it from www.acponline.org/cca. The Center for a 
Competitive Advantage is a trusted source of assistance helping member internists improve all 
aspects of their practices. If you have further questions concerning computer system selection, 
please call (800) 338-2746 extension 4553. 



137 


Acknowledgements 

The American College of Physicians - American Society of Internal Medicine would like to 
thank all of the publications that permitted the reproduction of their articles. 


“Will the Y2K Bug Force You To Replace Your Computer" ACP-ASIM Observer, March 
1999 . 

“16 Questions To Ask When Buying a Computer System.” Provided by Debra C. Cascardo 
Weissman. Cascardo Consulting Group, While Plains. NY. (914)696-3400. 

“With no perfect computer systems on market, practices ‘Making Do."* Physicians Financial 
News. August 15, 1997. p. S34. 

"Selecting practice management information systems’ Reprinted with the permission of MGM 
Journal. Copyright 1997. 

“Tips on Selecting a Computer System to Manage Managed Care.” By Debra C. Weissman. 
Medical Practice Management, July/August 1997. Reprinted with the permission of Williams & 
Wilkins. 

“What You Need To Know From Your Computer” On Managing. Vol.7, No. 1 . Copyright 1997, 
Health Care Publishing, Plymouth Meeting, Pennsylvania. 

“Keys for integration: Choose a system that does it right.” Reprinted with permission from the 
Medical Group Management Association. Copyright 1998. 

"Electronic Medical Records: A Practical Guide To the Joumey’ Copyright 1997, Today’s 
Internist. 

"Computerized Patient Record Systems: A Survey of 28 Vendors" Reprinted from the 
November/December 1997 issue of Family Practice Management. Copyright American 
Academy of Family Physicians. 



138 


DIRECTORIES OF SOFTWARE PRODUCTS 


Healthcare Informatics 

"1999 Resource Guide ” 

Cost $50.00 

To order fax (612) 835-3460 

Website ( ww\s'.heatthcarc-informatics.com ) 


Medical Group Management Association (MGMA) 

'Directory of Software Vendors for Group Praclice-1 99T 

Cost $85.00 

To order call (303) 799-1111 


Springer Verlag 

M.D. Computing 

Annual Directory of Medical Hardware and Software Companies - May/ June Issue 
Medical Hardware & Scfhvtue Buyers ’ Guide ~ IVovtDec Issue 

Cost $12.00 per issue 
To order call (800)-SPRINGER 


Healthcare Computing Publications Inc. 

HCP Directory of Medical Office Management Computer System Vendors with Satisfaction 
Ratings 

Cost $150.00 

To order call (71 8) 499- 5910 or through the 

website (www.healthcarecomputi 11 g.con 1 /m 5 rol.html ) 

HCP Directory of Medical Software 

Cost $44.00 

To order call (718)499- 59 10 or through the 

website (ww«'.healthcarecomputinc.com/msrol.html ) 

Physicians and Computers 

Online directory of Major Medical Software ( www.physicians-computers.com/links.htm ) 
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RESOURCES FOR EVALUATING SOFTWARE 
ALTERNATIVES 


CTS Guide to Medical Practice Management Software 
and Requirements Analyst software program 

CTS {Computer Training Services, inc.) 

Cost Guide & software; $495 Software atone: $ 1 95 

The 1 997 Guide provides a detailed independent analysis of ten products, which CTS identifies as the leading 
medical practice management systems; 

GPMS (IDX> Medic (Medic Computer) 

Vision (Medic Computer) PMstation (Datamedic ) 

PCN (Physicians Computer Network) QSl (Quality Systems. Inc.) 

SpectraMED (Cycare) Medical Manager (Systems Plus) 

R/2000 (Reynolds & Reynolds) MedAssist (Professional Software Solutions) 

* The 1 999 Guide is expected to be published in May, 1999 and will cover three additional systems: 

Practice Partner, Pipeline, and Advantx. 

Requirements Analyst^** software allows the user to customize weightings for 700 features and then rank order 
the ten leading products by those priorities. Analytical reports include expected costs for die requirements 
requested. Software can also be to request RJFPs and review other products. 

To order call (800) 433>8015 or order through the 
website (www.ctsguides,com) 


Medical Software Reviews 

Healthcare Computing Publications Inc. 

Personal Group/Iostitution/Librar^' 

Cost SI 17M2 issues $149/ 12 issues 

$ 1 99/ 24 issues $298/ 24 issiKS 

Reviews of individual software products may be purchased on a single transaction basis through Healthgate 
(http://www.heatthgate.com/HeaUhGate/priee^.Bssr.htinI) for $5.00 per review 


Checklist for Evaiuating Office Managetmnt Programs 
Healthcare Computing Publications Inc. 

Cost $20.00 

To order call (718) 499- 5910 or order through the 

website (www.healthcarecomputtng.com/insroLbtml). 
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CHOOSING THE RIGHT COMPUTER SYSTEM FOR 
YOUR PRACTICE 


A guide by ACP-ASIM 

This ACP-ASIM practice management guide is designed to provide internists and their staff a 
check list of steps to consider in planning and evaluating a computer system for their practice. 


Know your practice style, how your business 
office operates and what you hope to gain 
from your computer in the fumre. 

Survey the office and determine what you 
presently have as “systems" or procedures. 

• Anticipate the number of physicians and 
staff you expect to be in the office, as 
well as the number of offices you may 
expect to open. Determine the number 
of patients, especially actives, and their 
sources (HMO, private, referrals) you 
anticipate based on current growth. 


Are ^u doing billing manually? 

Are you under capitation or prepaid 
agreements? 

Are you required to communicate 
electronically to a managed care or 
insurance organization for claim 
submission, encounter submission, 
eligibility inquiries or 
authorization/referral actions? 

Dctentiine the approximate volume of 
insurance claims filed and the average 
turnaround time for payment. 

Estimate the person-hours required in 
daily/monlhly posting of charges and 
payments. What is the percentage of 
aged accounts receivable in 30-day 


intervals? 

• Are you interested in having on-line 
comfHtteri»d medical records? 

• Will you be using an office lab and do 
you want it connected electronically to 
your computer system for automated 
access to results? Ditto for a reference 
lab? 

• Will you want telephone access to your 
computer system from off-premises? 

• Do you plan to create desktop 
publishing documents for your clients’ 
edttcatkm and your staff s training? 

Do a needs analysts of the practice. 

Compare the advantages and disadvantages of 

having a computer perform individual functions 

like accounts receivable, medical records. 

electrimtc billing, etc. 

« Advantages: faster payments, better 

access to patient data for preventive 
medicine and risk management, better 
patient education and compliance, 
streamlining of m^ial office msks. 

» Disadvantages: some computer 

applications are far from perfect and 
expensive; some vendors understaffed 
or incompetent; time required to 
establish and maintain computer 
procedures; retraining costs. 
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Determine what additional requirements (such 
as phone lines, power mitlets. cables and 
connectors and hours per staff of 

training) will be necessary. Will nut^s be able 
tc access confidential information or just 
pliysicians? 

Decide what types of paper reports you want 
from a computer system (problem lists, visits 
due, missed appointment, l^yrolt diecks, 
accmints receivable, etc.). 

Mentally walk through a patient’s visit to your 
office and determine where you are wasting time 
and find out what are the most prevalent patient 
complaints. Make a list to discuss with potential 
vendors. Ask how Uiey would address each 
|:H-oblem. 

Establish fiaancial parameters. 

If you plan to computerize a function for the 
first time, complete a cost-benefit analysis to 
determine if doing so is worth the expense. 
Define the costs ycHi will incur in purchasing 
what you have decided you need versus the 
benefits or savings (mainly dollars and time) 
once it is running. 

Consider other costs such as supplies, insurance, 
hardware and software maintenance and 
utilities. Will you gain increased practice 
efHciency and safety by being able to process 
clinical data like prescriptions, preventive 
medicine reminders and the like by computer? 

Decide bow iar^e a computer system you 
really need. 

The needs analysis and financial parameters you 
have set will help you determine the type and 
amount of hardware and kind of software your 
practice needs now and for the future. Based on 
the number of patients you see (i.e., per week) 
and the number of financial, medical record, and 
inventory transactions your staff makes, you can 
determine how much hardware you need and 
which software applications are necessary. 


Hardware is always a major consideration, but it 
has become a manageable concern since 
hardware prices have dropped significanth . and 
you can lea^-purchase equipm^t at reasonable 
rales. Many state medical societies and local 
hospitals also offer leasing and purchasing 
arrangements. 

Some, not all, systems become obsolete very 
quickly: so you must be careful in choosing your 
hardware and operating system so dial you don’t 
get “iocked out" down the road. As long as you 
buy hardware that is middle of the road, modular 
and expandable, you should not have many 
problems later. 

Hardware requirements vary depending on the 
software system. Look to the vendor for advice 
and specifications concerning hard drive, RAM, 
cache, mega hertz, video cards, monitors, 
printers, back up. etc. needed for the vendor's 
system. 

If your practice does not have sophisticated 
requirements, you may be able to save on both 
hard and software by selecting a less complex 
software system. 

If you consider mail ordering your hardware, be 
sure the company is national, reputable and has 
been around a long time. The lower prices for 
hardware found in mail order catalogs are 
usually because the company has a high volume 
of purchases. But beware! Generally you should 
buy both your hardware and software from the 
same reputable local vendor, or at least get a 
maintenance contract covering both from the 
same vendor. If you have a computer 
breakdown and have bought hardware and 
software from different sources, rest assured that 
the hardware dealer will blame the software, and 
vice versa. Also lake caution with software 
vendors who offer hardware "deals," which may 
not be such good deals when carefully 
examined. Shopping the mail order and 
discount stores will give you valuable pricing 
information to use later in bargaining with your 
system dealer to get reasonable rates on both 
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hardware and software. 

Determine the software fuRCtions you need. 

The cost of software will vary depending on 
what you want - billing, scheduling, patient 
records, CPT and iCD-9 coding, drug 
interaction/information, electronic claims 
submission. Systems designed for large 
practices usually are consicterably more complex 
r id expensive than what small practices need or 
LM\ afford. 

Most physicians also use their computer systems 
to submit claims electronically to insurance 
carriers. Most new software billing systems 
include electronic claims submissions capability. 
If not, many Medicare carriers across the 
country supply free claims submission software 
to providers, and there are companies selling 
software packages for this purpose. 

Another option is to use one of the companies 
that offer their services to bill electronically to 
Medicaid, Medicare and the larger carriers in 
your area. The prices per claim vary, and you 
shield get bids from at least 2'-3 before making 
a decision. Compare the cost over time to what 
you would pay for software equipment and staff 
to submit the claims yourself. 

Electronic medical records systems are now 
coming into their own. They may offer a wide 
variety of additional services, including drug 
interactions, coding assistance, patient 
scheduling. E-mail, referral management, 
ordering, pharmacy refills, etc. But be careful to 
determine that the company will be around for a 
while and has some track record, that the format 
for charting is intuitive to you, and that the 
records system will effectively interface with 
your billing system. You also need to distinguish 
what services offered arc actually available now 
rather than planned, and which arc merely shells 
for data bases you must supply, insurance plan 
specific formularies and other requirements. 


When you consider computer systems, first 
select the software, then the hardware. Be sure 
to consider reliability . ease of use. data entry, 
presentation and accessibility-, compatibility w'ith 
other software like word processors and 
operating systems, flexibility (how easy is it to 
update and customize software and who can do 
it), and ability to link up with other systems, for 
instance at home or at the hospital. 

Approve and select a list of computer 
veDdors. 

Use written criteria to determine which 
computer vendors you will want to do business 
with. These criteria based on price, expansion, 
compatibility with other software systems, 
service and support, warranties, etc., can 
determine your initial list of vendors to consider 
and evaluate. 

Check directories of available software. Each 
company publishes a number you can call to get 
a list of the dealers in your area. Read reviews 
of the software. 

Develop your RFP- 

Develop a request for proposal (RFP) based on 
your criteria. Be specific in your written RFP as 
to what you want the system to do and what you 
expect of the vendor. Include detailed 
information from the list you made. 

You may receive demonstration disks in the 
mail along with the proposals. If the disks allow 
you to actually enter and retrieve data — many 
don't - use a checklist of desired features to see 
if the software docs what you want it to do with 
few hassles. If it works, examine the software 
and see jusi how easy it is to use it without any 
training. This will give you an idea of just how 
much training wilt be necessary for you and 
your staff. 


Establish product evaluation criteria. 
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Evaluate proposals and request hands>4>n 
demonstrations form vendors. 

Ask for at least 5 references in the area who are 
physicians in practices similar to yours and use 
the same version of the system you are 
evaluating. You ^touid call each of them and 
ask how they like the system and what problems 
they have had with the vendor, if any. Try to 
speak with those individuals in the piacttce that 
work directly on the system. Tliey can tell you 
best what problems they are having in everyday 
use of the system. 

Research each company's history, financial 
stability', track record of adapting their product, 
appar^t technical ami odier id>ility to survive 
over the long tom in this rapidly changing 
market. No matter how appealing it may be 
today, ymi do not wtuit to get stuck with a 
product that will stop evolving or not be 
supported by its company in the future. 

Seii^t 3-$ vendors to give y^u and your staff 
hands-on demcmstrations in your office. Have a 
check list in hand of the key features you want 
to die vemdor demonstrate. Ask to see st^ 
by-step how specific functions are perfixmed, 
ideally using your own practice data. Do not let 
the vendor show you "idealized* cases or show 
only those features the system hmdles bes. 

You want to see its weaknesses. Also force the 
vendor to distinguish features the system 
currently offers from those that are "coming" or 
"planned’*. 

After ycmr try to set up site visits to those 
practices which have the systems you are 
particularly interested in. Observe whether the 
system has teouble handling a full fnactice work 
l(^d. liktes navigation of the system b^tmie 
clumsier and the processing response time 
slower compared to the idealized demo? 

Consult with outside professionals (ik e medical 
practice management consultants and 
accountants as ai^opriate. Attend n^ionai or 
state meetings offeied by ACF-ASIM. etc. 


There are often exhibits and/or demonstrations 
sponsored by a variety of vendors. Evaluate 
each system demonstration and select a vetidor. 

Sign the contract and purchase the computer 
system. 

Before signing any contracts, contact your legal 
counsel to determine if all problems have been 
amicipated and addressed in the paperworic. 
Make sure the contract clearly spells out the 
vendor's responsibilities, especially service, 
support, and uf^ades to the system (whether 
they are due to your wishes or government 
regulations). 

• Be sure there are no co&s that do not 
appear in the written part of the contract. 

• Donotrelyonora!{»^isesor 
guarantees. Write down everything the 
vendor promises, get him to initial as 
validation and be sure all these claims 
are spelled out in the conti^t. 

• Ask the vendor about specific clauses 
you are having difficulty undmtanding. 

• Discuss terms of payment, delivery, 
return policies and arbitratiem rights. 

• In negotiating a warranty, insist on a 30- 
day. no questions asked, money back 
guarantee on all hardware. Warranties 
usually last six months to one year. 

• Sign up for a service and upgrade 
Bgreemem also. Programming and 
debugging is highly labor intensive, 
intuitive work and it is expensive. 

• Ifa problem is identified, a service 
response should be available within one 
hour. Detnmine the cost and nature of 
after hours and onsite service versus 
telephone help. Try to have hardware 
and software covered by the same 
vendor. If not. you must determine in 
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advance how the division of 
responsibility will be determined wher a 
problem arises. Also ask for service 
language that precludes the vendor from 
shifting responsibility to the electrical or 
telephone system in your building. 

There should be plans for loaner 
components if repairs are required. 

• Read EVERY item. Do not skim the 
contract. 

Install the computer system in your office. 

Be sure to allow ample time for the vendor to 
install the system in your office. Data 
conversion, staff and physician training, 
debugging and full operation may take longer 
than you imagine (anywhere from M weeks). 

Be sure to discuss this with your vendor prior to 
installation; so that you won’t disrupt your 
practice. 

Work closely with the vendor to develt^ a 
detailed plan and flow chan covering all aspects 
of implementation, including a specific time 
table for scheduling cabling, hard ware, training, 
software, and data conversion. Find out 
precisely what will be required of your practice 
for each of these key steps. 

Cabling is relatively inexpensive, and easier if 
done in one visit, so be sure to put cables 
anywhere you might install a PC or a printer 
later, such as provider areas, the lab. an extra 
one at each receptionist, one or two extra in the 
business office and the like. 

Train your sUffl 

Your staff should understand the components of 
the computer system thoroughly. This includes 
the operating system, and hardware as well as 
the software. Knowing how the system works 
will help your staff feel in command rather than 
slaves to the system. Be sure the vendor helps 
vour staff customize the software to your 
office’s specific needs. 


Training by the vendor should include; 

• File storage on disks 

• Use of directories 

• Use of keys 

• Back-ups 

• Primer commands 

• Modem operation 

• Cable connections 

• Common error messages 

• Power surges 

• Keyboard and screen freezes 

• Data entr> 

• Data editing 

« Data retrieval 

• Report generation 

• Menus and passwords 

• Logging on and off 

• System management and maintenance 

Be sure you encourage your staff to take notes 
on these things and then incorporate them into 
fact sheets at each terminal. Make sure that all 
support and supply telephone numbers and 
conucts are also posted. 

Evaluate the performance of the system. 

It is important that you continue to monitor the 
performance of the system to let the vendor and 
other suppliers know about your service, 
maintenance and expansion needs. Meet 
frequently with your staff in the first couple of 
months to determine if things are running 
smoothly. 


ACP.ASIM 

201 1 PENNSYLVANIA AVENUE. NW 
SUITE MOO 

WASHINGTON. DC 20006-1808 
(202|26MS3> 

October 1998 
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ACP-ASIM Observer 

Will the Y2K bug force you to replace your computer? 

Tips to determine how the year 2000 problem will affect your practice's 
ability to conduct business 

From the March 1 999 ACP-ASIM Observer, copyright © 1 999 by the American College of 
Physicians- American Society of Internal Medicine. 

By Carl Cunninaham. MBA 

If you haven't prepared your practice to handle the year 2000 computer problem, you now have 
two things to worry about: not only is there a chance that you have to replace, rather than fix. 
your computer system, but time to do so is running out. 

While the problem, frequently referred to as the Y2K or millennium bug, is expected to affect 
computing devices throughout health care, it will hit physicians the hardest by crippling practice 
management software. If you think that the worst thing the Y2K bug can do is cause your bills to 
go out misprinted "Jan. 1, 1900" instead of "Jan. 1, 2000," think again. Experts say that when a 
computer reads " 1 /I /OO" as "Jan. 1 , 1 900," it could get confused, shut down and possibly even 
refuse to reboot. 

At that point, with no access to your accounts receivable, how will you bill your patients and 
third- party payers, or even know which payers owe you? Without access to patient schedules, 
how will you know which patients are coming to see you the next day and what slots are 
available for future scheduling? Obviously, your cash flow and office operations could be 
seriously disrupted. 

If you don't already know whether your existing practice management system can be made Y2K 
compliant, call your vendor. If you have minimized your practice’s expenses by retaining an 
older computer system and/or by deferring the purchase of software upgrades, your system may 
not be Y2K compliant. Recognize that as late as 1997, a number of vendors were still selling 
expensive software that was not Y2K compliant. Physicians have taken at least two of these 
vendors to court to address the problem. 

If your vendor can supply you with a "patch" to fix the Y2K problem, order one right away. 
Backlogs for these retrofits could develop by midyear as practices rush to get them. Some 
vendors are exploiting this situation by cbaiiging thousands of dollars for Y2K compliance 
packages. Worse yet, there may not be Y2K compliance retrofits available for many older 
systems, whose original developers have gone out of business or been acquired by large national 
firms that don't want to support older products. 

If you own one of these phased-out "legacy" systems, you may have to replace your hardware as 
well as your practice management software. Even if you can fix your existing system, it may be 
more cost effective to buy a modem system that gives you greater functionality. 

Unfortunately, time is quickly running out to make such a complex purchase. With literally 
hundreds of systems to choose from and a flood of end-of-the-millennium orders, it will 
probably take longer than the usual six to nine months to select and install a new computer 
system. As a result, the longer you wait to start tf^ selection process, the greater the risk that the 
vendor you pick will be too busy to install your system before Jan. 1, 2000. Some analysts 
predict that backlogs for new systems will start to develop this spring, so you should start your 
search immediately. 

Smaller practices may be able to opt for "off-the-shelf products that you can use to replace your 
existing system. These low-end products typically sell for less than S2,000. but they offer only 
bare-bones features and very basic billing and scheduling functions. That may be enough for 
small practices, however. These products may also prove to be the best — or only — option if 
vendors of high-end products can't deliver before Jan. 1, 2000. 
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The College can also help. Over the last year, articles about how to cope with the Y2K problem 
have appeared in both the ACP-ASIM Observer and Today's Internist, and another 
comprehensive article is planned for the next issue of ACP-ASIM Observer. (Go to ACP-ASIM 
Online at www.acponline.org for back articles from either publication.) In addition, the College's 
Center for a Competitive Advantage has developed an information packet. " Seleclinu a Sofiuare 
System ." which is available on the College's Web site and through ACP-ASIM Customer Service 
(800-523-1 546, ext. 2600, or 21 5-351-2600, 9 a.m. to 5 p.m.. EST). 

The College is also developing new guides, checklists and scorecards to help members evaluate, 
compare and select Y2K-compliant practice management and electronic medical records 
software. Look for these and other tools on ACP-ASIM Online in the "Computers in Medicine" 
section. Finally, members can call the College's Medical Informatics Department (800-523-1546. 
ext. 2572) for more information about Y2K compliance issues and the Center for a Competitive 
Advantage (800-338-2746, ext. 4553) for information about purchasing a computer system. 

Carl Cunningham, MBA. is Director of the College's Center for a Competitive Advantage. 


Government to doctors: time to get oflice systems Y2K compliant 

The federal government is turning up the heat to encourage physicians to make their office 
systems Y2K compliant. 

As part of its Y2K efforts, HCFA has instructed its Medicare carriers to reject electronic claims 
that do not use a four-digit number to indicate the year beginning April 5, 1 999. In a Jan. 1 3 
letter, HCFA directed its carriers to return to provide claims that use the older two-digit format. 
Computer systems can misunderstand two-digit dates on claims that describe years beyond 1999; 
that confusion is the heart of the Y2K problem. 

Based on its current experience, HCFA believes that the restriction will immediately affect only 
a small percentage of Part B claims. Many physiciaits submit their claims through clearinghouses 
or other electronic intermediaries, which already correct date formats. College officials are 
concerned, however, that physicians getting help from these services may mistakenly believe that 
their systems are Y2K compliant because HCFA and other payers are able to process their 
claims. The problem is that these services will be unable to work widi physicians using non-Y2K 
compliant systems starting Jan. 1 , 2000. 

HCFA had previously said that it would require claims to be Y2K compliant by Jan. 1 of this 
year but then extended its deadline to give providers more time to prepare. For more information 
about the change, contact your Medicare carrier. 

In another year 2000 development, the government will hold its second ”y2K Action Week" 
Mmch 28 through April 3. The goal of the event is to raise public awareness about Y2K issues 
and to alert commimity organizations to prepare their systems for the new millennium. 

The week will focus attention on institutions and organizations in 25 different business sectors 
ranging from banking to food service to health cate. During the week, members of the press in 
local communities are expected to talk to members of these industries, including physicians, 
about their plans for dealing with Y2K Issues. 

HCFA officials are encouraging physicians to prepare to answer questions that reporters and 
patients may ask. Officials say that physicians should be able to answer detailed questions about 
how they have prepared their office systems — including computerized records systems, billing 
systems and appointment scheduling systems — ^to handle year 2000 problems. 
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16 Questions To Ask When Buying a Computer System 

Developed By: Debra C. Cascardo Weissman 


1) Batch-data entr\' capabilities: 

• Can you post a batch of 
transactions at once? 

• Can you post multiple itmes on 
one account at the same time? 

2) Menus: 

• Are there key words or hot keys 
that allow access to different 
functions without paging through 
menus? 

3) Commands: 

• How complex are the commands 
to execute functions? 

• Are cheat sheets taped to the 
computer which users must rely 
on? 

4) New account set-up time: 

• How long does it take? 

5) Name and number look-up: 

• How fast can you find a patient 
number? 

• Can you find the name by looking 
up the number? 

6) Manuals: 

• Are they simple to read and 
understand? 

7) Training: 

• In your office? 

• Additional Training for new staff? 

• Immediate support for questions? 

8) System backup time: 

• How long does it take? (Daily 
backup is important; if it takes too 
long the operators will avoid doing 
it.) 

9) Extra features: 

• Do you need them? 

• Will they really save time or 
money? 

• Do they save a problem? 


10) Interruptions: 

• Can you interrupt posting to look 
up another account? 

11) Deletions: 

• Can old accounts be deleted? 

12) Passwords: 

• Can you restrict access to different 
parts of the program? 

13) Service: 

• How often? 

• How quick? 

• How much? 

• Is there a service contract 
available? 

• Does it include upgrades? 

14) Updates: 

• How often has the system been 
updated? 

• When was the last update? 

• When is the next one expected? 

• What new features will it have? 

• Will you automatically receive the 
update? 

• Can you purchase the update at a 
reduced rate? 

1 5) Managed care reports: 

• Can it produce the necessary 
reports? 

16) Software: 

• What software does the package 
include? 

• What is available at extra cost? 


Debra C. Cascardo Weissman is principal of the Cascardo Consulting Group in While Plains, NY, 
Phone: (914)696-3400, E-mail dcascardo@aol.com 
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Reprioted with the permission of Physicians Financial News 

Vol. 15 No. II August 15, 1997 


With No Perfect Computer Systems On Market, Practices ‘Making Do' 

BY EMILY PAULSEN 
Contributing Editor 

Despite new developments in electronic medical records, voice recognition software and 
telecommunications, many physicians in small, private practices are putting off major computer 
purchases. Instead, they are sticking with their current systems, contracting with outside billing services or 
putting together their own makeshift systems. 

“1 don’ t see a lot of people making big purchases right now,” says Stan Schulman. consultant with Medex 
Billing Associates in White Plains, N.Y.. reseller for Medical Manager, one of the most popular practice 
management packages. “People are going to stay with what they have orjust upgrade. They'll make a $2,000 
or $3,000 purchase, but you don’ t see many people looking at $20,000 or $30,000 systems right now.' 

Several factors contribute to physicians hesitation to embrace new technology. First, medicine itself is in a 
state of flux. Managed care has yet to reach all comers of the country-bui many 
predict it will in the years to come. And with hospitals and other organizations 
in the market to buy practices, it is difficult to plan for the future. 

No Perfect Package 

Change seems to be the hallmark of the computer industry, as well. Although electronic medical records, 
voice recognition and telecommunications capabilities have come a long way. 

the shake out will continue for the next few years, consultants say. Software companies are working hard to 
develop the perfect package that integrates billing, medical records, electronic, claims, scheduling, voice 
recognition and other functions, but the pieces are not in place for this type of program. 

“Everyone’s looking for the perfect patient chart that fuses it all together,” Mr. Schuhnan says. “A lot of 
people are working hard to develop it. But I haven' t seen anything beautiful yet.” 

The changes in the healthcare arena have also affected the software companies that serve medical practices. 
There used to be a natural segmentation of the practice management software market. Companies like IDX 
appealed to larger organizations, such as hospitals. Smaller practices looked to packages like Medical 
Manager. As practices grow and merge into larger organizations and hospitals move into outpatient care, that 
natural division has dissolved. Companies like IDX and Medical Manager are now direct competitors for 
new contracts. This change in orientation is bound to have some ramifications in the years to come. 

Another factor is the new millennium. The software in most physicians' offices can not cope with the year 
2000. And even some of the software on the market now is not fully “year 2000 compliant.” Many practices 
are relying on their current vendors to get them into the millennium without incident. 

But they may not like the solutions their vendors offer. For example. Mr. Schulman says that Medical 
Manager has yet to release their 2000 edition arid when it does, the company may force its users into a 
several thousand dollar upgrade. Some practices may opt to Jump ship rather than shell out the money to 
upgrade-especialiy considering other obstacles to computerization. 

Just because computers have the capability to do something does not mean it will all go smoothly. Physicians 
want computers that solve their problems, not add to them. The lack of standards for such things as electronic 
claims certainly does not help. Although insurance companies accepted the ANSI 837 standard a couple of 
vears ago. HCFA 1 500 is still in wider use. But even that form is not used uniformly. 

"Electronic claims are actually getting more complicated in some cases.” reports Mr. Schulman. “There' s a 
standard form, but you fill it out differently in each state.” 
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In fact, when Mr. Schulman tried to help his father with bHHng for his obstetrics practice in Florida, the first 
l»tch of claims ati came b»k rejected. “I had filled them out like f do for my clients in New York State." he 
says. “Florida wanted them done differently.” 

For practices that see patients from several states, dealing with these differences can get frustrating. 

Anodier (Ostade is die frequent turnover of office staff in medical offices. To main, it seems that just when 
an office manager or billing clerk gets the hang of using the computer to fill out claims. tliev move on to 
another jd>. The cost of their training~and the value of their on-the-job exj^rience-goes with them. 

As a result of these frustrations, some practices have given up on computers altogether and signed on with 
billing ^rvices. C^istde medical billing services have become the number one home-based business in the 
United States. Surgeons, anesthesiologists and others who do not have a fulhiime office or staff are most 
likely to outsource billing. Older physicians, nearing fctifcmcot, who do not w^t to make an investment in 
computers, may also opt for a billing service. 

But for office-intensive, primary-care practices, such as internal medicine, family practice and obstetrics, 
outsourcing is not a practical option. It does not make sense to pay a billing serv'ice a dollar or more to 
process a claim for $30. 

A lot of these practices find that, instead of buying an all-inclusive, networked practice management package 
for thou^nds of doll^. they can do better by piecing together their own '’system'’ of stwid-alone c<»nputers. 
Although these non-networked offices may run counter to computing trends. 

many practices are finding this stop-gap measure is just what they need to take advantage of technology 
without t»«aking the bank. 

For example, they may {^rchase a stand-alone billing package, such as MediSofi or MedWare, for a few 
hundred dollars. These Windows-based packages may ntw offer extensive networking capabilities or 
electronic medical records, but they serve the billing functions of an office efficiently and inexpensively. 

If the office wants to add other capabilities, they often do so by buying another siand-alone computer that is 
used mainly for that function. “The price of cemiputers has come down to the point where practices can 
afford to buy a computer just for ceruin tasks,” Mr. Schulman says. For example, as more payers offer 
eligibility information, claims tracking and eventually claims submission over the Internet, offices may 
putchase a computer with a high speed mod«n for Internet access. 

Then there are those physicians that are heading into the 21st century with no holds barred-and no regrets. 
They are putting networked computers in their business office, examining rooms and on their own desktops. 
They have integrated computers into every part of their practice of medicine. And they find that they can 
serve their patients better and achieve a more satisfying balance between career and family. 

For Dr. James E. Palen. a family jHactitioncr in Cape Giradeau MO, computeriiation helps him maintain a 
successful and fulfilling medical practice in the face of managed care and lower reimbursemems. He retired 
his paper files in 1993. converting ccmipletcly to an electronic medical records program that he developed 
with his son. Using a handheld computer, he fills out the electronic medical record while he Ulks to his 
patients. 

The goal, he says, is to have the record complete when he walks out of the examining roexn. The record can 
then be used to generate a bill or a claim form. Dr. Palen believes that his system can trim five minutes from 
each patient encounter— making his practice profitable in fewer hours. 
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Tips on Selecting a Computer System to 
Manage Managed Care 

Debra C. Weissman, M.A., M.P.A.* 


ABSTRACT 

in today's managed care envirenmant, medleat praetleas 
must have a computer ayatam and software that offer ez* 
tanahre Informatton capaMiWea, floalbllily, and control. 
Thfa aftide piovtda s an overview of the eaeentlal and de- 
aiiaMe fea turea of such syatema ar>d aoftware. in effect, 
it can be used aa a ehaeUiat of quaatlona to uae in mmK 
uaUng software for its ability to manage eomraeta, track 
payttv e , aMtiwwt— rofari a i forma, track mem* 
bora, and more. 

Key words: Computer ayatams/aofiware: eorttraet man- 
agement; capltatien. 


INTROOUCnON 

Joinmg a managed care plan farces you to ^ce 9catcf 
xisiB and goieiate more pa p e r w ork than e\*er before. As 
a resah, closely cracking information about your prac- 
tice as well as streamlining the pagierwork are extremely 
important To thrive in today's managed care environ- 
ment you must have a computer syscem Chat gives you 
flexibUity and control Infaimation is power in the new 
health care world. Insnzance companies have UIS ex- 
pe;ts. the computer system, you. too, can one- 

ate reports on the demographics of your patient 
population and practice utilization. Thcae will h^ you 
to negotiate the best contract tenna. Your computer re- 
poits will ^so let you detennine which aapects of your 
practice are the most economically sound without sac- 
cifidng quality and alert you of areas requiring reviMna. 

If you have a system, consider tqigeading it. If you do 

not have a computer, get one NOW. You riwuld kook for 
the following basic features in a computer module to 
hflp you take control of managed care in your office. 


*Tm C M BWinC o n iiiangOwm.rQs"m s Ow * .fcaiaoD. 
NY 10SM. 
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MANDATORY FEATURES 

The following features should be considered as manda- 
tory. The software should: 

• work with all managed care situations, including pri- 
mary and specialty care; 

• use electronic data interchange (EDI) technology; 

• provide detailed managed care reports; 

• manage all aspects of managed contracts; 

• provide full refexxal management with customized re- 
fenal forms; 

• post capitation payments; and 

• maintain membership logs. 

REFERRAL MANAGEMENT 

Ideally, the computer software also should allow three 
reqior types of referrals: 

• primary care physician (PCP) to ^lecialist; 

• PCP to fadlily; and 

• sq>ecialist to PCP. 

Referrals can be issued for a specific period of time, 
dollar amount number of vinu. or oreatment plan (wp^ 
rtttr procedures). Does the computar system allow for 
any combination of these plus general referral reasons 
and unlimited narrative notes? 

Other features to look for in the referral management 
module include: 

• System automatically checks the managed care con- 
tract and iaattes a warning when contract limits are 
exceeded; 

• Ufetin>e,TOmal and user defined frequency limits for 
the contract may be defined for each contract; 

• For easier referral ottiy, frequently used refeiralcri- 
tezia can be set up as a standard referral and trans- 
ferred to a new referral at any tiine; 

• Refemls that require authorization should be tracked 
mid the user alerted when an authoiizstion is required; 
and 

• During the referral juocera, the system ^uMild auio- 
witifiiy maintain the status of die referral (i.e.. new, 
author!^ in pr o gr es s , or closed). 
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WtmmMn^ CompuMr System to Managt Managed Cara 919 


MANAGED CONTRACTS 

‘Hw computer module ^lould offer flexibUiQ^ in definini 
plan comiacts. For each conoact, the sysimi should allow 
inciuskm ofaf^roved physicians, Sfi^roved physiciaos by 
R>ecialQr, approved iadlities. allowed procedure codes, al* 
lowed diagnosis codes, or any combination of these. In ad- 
dititm. preauthCKization for services should be defined as 
“required,* “recommefuied,* or *liot required* depending 
on Che following criteria: physician inside or outside the 
plan comracL {rf^rsician approved by spedalQr, fadli^ in- 
sideoroutsidetheplancontncc,andinpatiencorouipa- 
tieA treatmeiiL In addition, look for these capabdicics: 

• Userdeflned limita by dirfiar amount or number of 
its can be set up for each plan's managed services. 

• Sysem should store pRbededvahieB for dottas per visiB, 
pa* inucs, per iOO&aimitaffinanh. arid per lefiBBl; these 
projected values can be used to compare the practice's 
actual pecfocmance and the plan's expected 

• Each contnct allows a separate schedule ^approved 
amounts to be used for plan referrals or specialist 
ferrals or for PCP payments to the specialists. 

CAPITATION PAYMENTS 

Capitation payments should be pasted ditecdy to the 
syRem. P^mentt should be tracked by member count 
and distributed across muiiipie physctans. Each payncru 
should be able to be posted using a userdeflned type (e.p.. 
membership, recroaoive, bonus). When the paymoa is 
enCKed. a date should be required disc will allow track- 
ing Che memberslup daces the paymetu covers. 

with the right computer ayatem, 
you, too, can create reports on 
the demographics of your 
patient population and practice 
utilization. 


CtlSTOMIZEO REFERRAL FORMS 

Look for software chat allows customization of the 
second page of referral forms. Thd will enable each plan 
to have its own fonn(s). 

MEMBER TRACKING 

tlie software should be able to maintain a Use of each 
plan's members. For each member, the system ^uld 
track membership ID number and start and tsnninaticti 
daces. There should be an option to update ■Mwu^iy or 
through an EDI network that communicates diraedy with 
the aitthoiizing agency. 


USING DATA TO COMPETE IN MANAGED CARE 

In addition to helping you manage your ofTiee, your 
computer system can give you an edge in negotiating 
managed care contracts. Information regarding your pa- 
tient demographics can provide valuable perspectives 
on your practice. Items as diverse as age and zip code 
can lend insight into your patients and how sick ymi can 
ei^ect them to be. l^e data can he4> you evaluate man- 
aged care contracts and better negotiate with the plana. 
You will loiow where your practice income is geMtated 
and can determine how managed care and capitatimi 
rates will change that tneome. In ocher words, die data 
will allow you to Judge if the increased number of pa- 
tients will compensate for the probable decrease in al- 
lowed fees. 


The computer module should 
offer flexibility in defining plan 
contracts. 


As an extra point, just having precise data on your pa- 
tients and treatment plans will also convince the man- 
aged care plans of the efficiency of your practice. By 
properly pulling data into reports, you can show: 

• proceduies usually performed for each diagnosis: 

• ireument pian patterns for each physician in the 
practice: 

• age. sex. and location of pacienis for each diagnosis 
or treaonem code; and 

• amounts billed and allowed for each diagnosia and ha 
ocatmempian. 

PREPURCHASE ISSUES AND QUESTIONS 

Aak the vendor to give you a demonsnekm in an office 
that is the same specialQ^ as youis and equipment com- 
parable to what you ace considenng. An actual database 
may not behave flawleasly. Use a company that has been 

in buameaa for 5 to 10 yearn. Aak for resumes on their kiy 

employees. How much tiBRover is there in the tectaiical 
iBPpoctdepac« ic it ? How c q>eriencedatetheirtechaup- 
portr e p rea emaiives? Ask the actual useo and operat o rs 
about the ^marnb snengtha and weakncaaes. 

Also, c on a ider asUng about the following: 

• Batch-dma entry capabilities: Can you post a batch of 
izansactions at once? Can you post multiple items on 
one account at the same time? 

• McmmAreiherekeywocdbcx'hoclwysthatallowac- 
cem » diflfeceK hmeams wiihouc pagng through menus? 

• Commands: How complex are the rammanda to ex- 
ecute foncoons? Are chm ‘cheat sheets* taped to 
the computer dtat the uaeis must rely on? 
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• New account set-up time: How long docs it tito? 

• Name ami number loQk<i9: ik>w &SC can ^ find a 
paimt nuRd)ec? Can you find the name by looldng up 
the number? 

• Manuals: Are they simple to read and understand? Ar 
they deariy tsganized? ^ thoe a pa^ {»- section de- 
voted to the most common questions? 

• Training: WiU they train in your office? Do they offer 
additional trakung for new staff? Is there imfw»ritat» 
siq^xut fear ^estums? 

• System backi^ time How tong does it take? Daily 
backup la important If the tinw is too tong, the oper- 
ators will avo^ doing iL 

• Extra features: Do you need diem? Will they ready 
save time or money? Do they solve a problem? 

• Interruptions: Can posting be intemipted to look 
another account? 

• Ddedems: Can old accGuzts be deleted? Can accounts 
be deleted even with an open balance? 

• ftttswords: Can access to different parts of the pro* 
pam be restricted? 


• Service: How often? How qmek? How much? Is a ser- 
vice contract availabte? Does it indude ui^ratks? 

e Updates: How often has the system been updated? 
When was the last update? When is the next one ex- 
peered? What new fea&ires will It have? you au- 
tomatically receive the update? WUI you have the 
opportunity to purdiase the tmdate at a reduced rate? 

• Managed care reports: Can it produce the reports we 
roen&k>ned? 

• What software is mduded in the package? What re 
available at extra cost? 

NEGOTIATE 

You wiU be nuddng a mdatamid iiivesan«it in your 
practice when you purchase a new computer system 
or update your present system. You negotiate when 
you lease a car why not wtoi ymi lease car fcmy a com- 
puter? Remember Derermine your neecis— tiuse for 
the near future as wed as current ones. Deal with rep- 
utable professionals and make sure training and sup- 
pent are available. 5 
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Selecting practice 
management 
information systems 


by Robin and \%)cent Clottl 

Abstract 


E^wonlK 


De^Jtte enannous advances in inibnnaoon systems, 
the pnxxss by which most medical pfBcdoes sdeet than 
has remained vtitually unchanged far decades: the 
request for pr opos a l (RFF). Unfortunately, vendon have 
learned w^ to mmixntze the value of RFP cheekUsta to 
where pundiaaers now learn little about the system fiinc* 
tfonaltty. The authors describe a aeleetton raethockdogy 
that rejdaces the RFP wtth soared drmos. r e v lewi of ren* 
dor user manuals and mathematically structured reto'- 
encecheddng. In a recent ael eetton praceaa at a m^or 
roedkal center, these tedmiques yielded greater usa 
buy-in and fovorable oontract tenns aa well 


• strides have been 

made to practice management 
information s^tems over the 
past few years, with such new 
developments as electronic 
'.’' I charting, voice recognition and 
^ j optical imaging adding new 
•:r dimensions to vrtiat used to be 
.^^l^^^in^le physician billing sys- 
tons. Modem technology, such 
as RISC-based minlcon^tos 
and client server architecture, 
have ushered In a new eia in 
price/performance for haid- 
warc, ndille electronic charting 
and mana^id care applications 
are pushing the software enve- 
lope. However, the process 
which most medical practices 
evaluate and select among 
cuuipeting practice 
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management information ^tems is 
stlU as old as keypunch ca^ sys- 
terns of the 19508. 

The request for proposal fRFP) Is 
the dominant tool by most 
practices and cortsulUng firms evalu- 
ate potential new systems today, 
practically unchanged from the 
1960s when physicians first utilized 
computers. The RFP is comprised 
phmarify of a feature checklist 
thereby vendors are asked to 
answer an elaborate series of ques- 
tions about thdr ^terns' function- 
allQ'. with the vendor who answers 
the moat *yes* responses usually 
being the wtiUMr. The problem with 
RFPs is that most modem systenis 
ena^e vendors to answer *yes* to 98 
p e r cent or more of the feature 
checklist through such creative 
toc4s as report writers and screen 
generators. In addition, most con- 
sulting firms have developed “boiler- 
plate* RFPs. to whl^ vendors 
respond with ‘boilerplate* proposals, 
neither document reflecting maz^ of 
the unique charaaelstics and 
requirements of Individual practices. 
Lastly, the semantics tzrvolved in the 
worthng of RFP questions is hardty 
fod-pr^. leading to frustrating *I 


thought you meant..* discussions, 
whether in or out of court. 

This article describes how our 
organization selected a new practice 
management information system in 
1996 by using an approach that 
totally t^passed an RFP. yet enabled 
us to acquire a state-of-the-an sys- 
lem at a very competitive price. This 
new process enabled the actual 
users of the new system to evaluate 
^sterns through such techniques as 
structured ^tem demos, refe r enc e 
checking and pertisal of vendor -user 
manuals, rather than reding on RFP 
checklists alone. The result was not 
only a more accurate rating of prod- 
ucts. but tremendous 'buy in' by 
the end users, which is the best 
preparation for an eflective iiiq^ 
mentation. 

Backgroimd 

Manhattan Management Services 
Inc. (MMSl is a practice management 
corporation owned by the 
Depanment of Medicine at St 
Luke's-Roosevelt Hospital located in 
mid-town Manhattan. MMS provides 
bilUng services for 390 physicians 
afBHatM with the hosottal. with 
annual revalue in the icns of 


FIGURE 1 

Praetiee management system selection process 
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mjmorx of doUais. TJir^ many prac- 
tlces. MMS has seen Its services 
gradually evolve from simple bllilng 
services Into more of a management 
service orpnizadon. as mem^ 
physicians reacted to the Impetus of 
managed care. *Ih^ began request- 
ing iiureased assistance In n^otlat- 
ing contracts with HMOs, cost 
accounting, office scheduling and 
even conqmtertred charting. 

MMS had been using a billing 
system that was rdatlvety robtist 
alien oTlgtnally purdiased for umng 
automatfon In die earty 19905, but 
the product had been scrid to a new 
vendor, who announced plans to dls- 
conttnue It within a year. Service 
and siQqxnt were d 4 ^>tng 
and thm was little R&D being com- 
mihed to meet managed care 
requirements. According^, MMS 
embaitod on a search for a new 
tem with several goals: 

• to sdect a jxacdce management 
infonnation system from a lead- 
ing vendor that would not tlkd^ 
be dlscanttnue In the near future: 

• to conqrfete the setectkm process 
as rapidly as possible, so we 
could get off the old ^Btem 
before service deterloiated fur- 
ther and 

• to include functionally in new 
^jpUcaUon areas, such as: 


- managed care. 

- oflke scheduling, and 

- electronic charting. 

A kickoff meeting was held in the 
foil of 1995, with a sdecdon team 
re presenting users from vailotis 
d^)artmenis In MMS. Indudtng r^- 
istiatlon. charge entry. pa 3 mient 
posting and controls, customer ser- 
vkx ai^ managed care. 

Several phj^lcians pardctpated 
tn the selectlan process as thdr 
schedules allowed, and representa- 
tives from the Sl Luke's-Roosevdt 
Hospital MIS department also 
attended key sessions. The search 
for a r eplacem ent ystem was guided 
by the PERT (Periodic Evaluadcai & 
Review Technique} chart shown in 
Figure 1 (page S6}. dial outlined the 
detailed steps thal MMS' selecOon 
team was to foUow durtrig the sdec- 
tlon process thmughout the stx- 
month prefect Each p aragra ph that 
fidfows Is kyed to the PERT dtart 
fay the numbered boxes. 

1. lasoe figr lu fta ma Hw* 

This first step in die proces s cm- 
slsted oflasuing a request frir mfbr- 
matkin (RFI) or general 
questkmnalie to the *rop 10” 

practice management ystem 
vendo r s: 


FIGURE 2 

Vendor demo results 

Value 



• national Anns — leading va)uut» 
prominent throughout the 
country, such as IDX. ^ilS. 
CyCare. Medic and PCN: and 

• local firms — with a strong pres- 
ence In the New Yoric area, 
which has several unique billing 
requirements. 

The RFI asked each vendor to 
provide rough costs for their systems 
as well as key information about 
their firm, such as annual revenue 
and profitabUiy, nunfoer of employ- 
ees and number of clients, both In 
New York as wdl as nattonwtde. 
Thus, the RFI enabled us to narrow 
the field Immediate to ony those 
firms who could prove their financial 
vlablUy. charged a reasonable fee 
and a kx^ presence. 
InteiesUngty. several vendors 
diot^j e d out at this stage based on 
the questions in the RFI. saving 
themselves the marketing costs and 
ourselves the ttme and trouble of 
evaluating them further. 

2. ttop 10’ hsto 

The second step tn MMS' selectkin 
proc e s s was for each tiser area to list 
the top 10 features that their depart- 
nxnt required In a new system to 
tnoease productivity and reduce 
costs. Our coiBultant assisted by 
dlsorlbutmg san^fies from other 
practices, which aD fit on a single 
pagearvl Included: 

» Features that were being utilized 
from the old system whi^ users 
did laa want to lose; and 

• Important fesdurts th^r desired 
In a new system, avoiding 

any ‘gbnmees* like ‘on-line.' 

The lists were segregated fay 
department and would serve as the 
boks for subsequent steps tn the 
B fJec tl nn proces s , whereby usera 
vmuld tel^hone r eferences, resesurh 
user manuals and rate demos. The 

Top 10 feature lists replaced the 

bloated *feature ^eddist” of an RFP. 
but were scored by our own users to 
avted the proUem of over -zealous 
answers fram vendor marketing rq>- 
resentattves. 

3. System demos 

The next step In MMS' selection 
process was for the users to attend 
demonstrations of each of the 
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rematntng vendora’ systems at the 
practlee. ao eadi ikpaitmai t could 
observe the system first hand. Eadi 
vendor was allowed one fiiU day. 
with one to two hours per user area, 
to shew their kQr features and 
answer questkms. 

Users rated such aspects of each 
system as user-frlendllness. ease of 
s cr e en rravi^atkin. report writers, 
among others, using a checklist pro- 
vlded our consultant The consul- 
tant semed the dieckllst and 
tahiilateH the tesults in a detailed 
spreadsheet ‘The demos not only 
allowed MMS users to learn about 
the state-ttf-the art in contenqxnaiy 
practice management systems, but 
also allowed a ranking of each ven- 
dor's product according to the needs 
of MMS departments, using the 
standard quesOons as well as Top 
10 features descrtt)ed above. Ihe 
results of the demos are shown in 
Figure 2 (page 58). 

The results of die demos were 
reviewed at a meeting with selected 
plQ’slcians and management of MMS 
and end users were given a chance 
to comment cn eadi system. The 
results of the discussion wtth the 
usen was that pfaysldans learned In 
a brld' meeting the net d* a long and 
arduous deno p rocess, and ea^ 
pascal had their s^. ao ar^ dls- 
a^eements about voidors woe 
aired <^>enly. Based on the rough 
price quotes In the RFT and de^ 
results, four vendors were selected to 
p rocee d with the nod steps. 

4. Rpg (request Cor price 
qnotstkm) 

Alter the system demonstrations. 
MMS issued a "request for price quo- 
tatfon" (RP9) sohcWtig detailed price 
bids from the remaining practice 
management system voidors in a 
cemmon formaL The body of the 
RPQ eqilained MMS's current sys- 
tems and general ^'stem requtre- 
moits. and inchided several forms 
the vendors were to couqilete: 

• A d Mfliiwi cost tneakdown was 
requested. Including five pages 
on hardware, softw^ arid 
irotallatlon fees. The hardware 
and software costs were phased 

that is. MMS would first 

htlBng and accounts 
receivable (Phase 1). then 


charting and managed 
care (Phase O: 

• Cttexd base ^ statistics vi«re 
reciuested on the size of each 
vendor's client base by number 
of physicians, ao MMS could 
ascertain the extent to which 
each vendor was committed to 
our large and the unique 
New York market; and 

• Usa "<aniiaU — requested, 
ao MMS users could review both 
the quantt^ and quaUQi of the 
t**-hTTfa-al Aw^inign tat^nn each 
vendor provided wtth their system. 

Also included m the RPQ was our 
crasultant'a contract questionnaire, 
which included 25 contract issues 

th^ have foamed are ouclal bi 
eventually working out a fovorable 
a^eonent While the vendors were 
working on their proposals. MMS 
users began the neri two tasks: tele- 
phones and manuals. 

5 . nmae icfereBeei 

Wiilc the vendors were respond- 
ing to the RPQ. users at MMS were 
tefophoRtng their counterparts at 
dient practices, asking them 
questkms from anotbo' cheddist 
conoeming r esponse times, ongoing 
support a^ otlwr questions. The 
users did not speak to nranagement 
at the practices, but rather the 


af-hiai wol ' k ets usod file system 
<m a d^-m-day basis, thus avoiding 
an y '‘pditicalfy correct' answers from 
hi^er-ups who nay be wary of 
angering vendors with negative 
<-«H n iiM! n t a . The "net' is shown in 
Figure 3. and shows how roost ven- 
dors are rated for lower than the 98 
parent poslttves that thty typically 
respond with In an RFP. Indeed, the 
users began to get an earful about 
how no systero was perfec t thus 

lowering their erqrectatlcms frtan tite 
t^rpetbofo of the sales dezxxs azal 
educating them about how hard the 
cotrversian would be wtth any new 

system. 
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6. Manual terlew 

While making re f ere n ce naiig 
users at MMS also perused the sys- 
tems' user manuals, which were bor- 
rowed from each of the semi-finalist 
vendors. Proposals are usually the 
product of vendors' marketing 
departments, often loaded with 
'futures* technical manuals: on the 
other hand, are usualfy written 
service personnel and almost always 
are somcw^iat late In catching up 
with new releases, therefore, being 
fiar more conservative. In addition, 
the user manuals serve as an ideal 
product definition in a contract hav- 
ing been written ty the vendor and 
not subject to any int e r p retation or 
technical audit as are most RFP fea- 
ture checklists. 

Each vendor's documentation 
was reviewed for its timeliness, 
of use. Illustrations, indexes and 
other features, again using a shuc- 
tured checklist Each user depart- 
ment also looked up their Top 10 
features in the manuals to ensure 
that the systems performed the func- 
tions th^ deemed odtlcal. a process 
isr more reliable than relying on 
proposals from vendor siespeoplc. 
tidilch generally say to most 
questions In an RFP. The results of 
the documentation review are given 
in Figure 4 (page 64). vdilch a gatw 
sluiws far less than perfect scores, 
unlike most propos^. 

7. fteUminaiy costs 

While phone naiu were being 
made and manuals reviewed, vendor 
responses to MMSs' RPQ were being 
analyzed to compare costs. The RPQ 
had vendors respond to mar^ 'hid- 
den* cost areas, such as travel, both 
for vendor Installation personnel 
coming to New York, as well as MMS 
personnel traveling to vendor head- 
quarters for classes. Ongoing aisiual 
maintenance fees for hardware and 


software were abvi factored in. so etc., compared to costs. Buying the 
that total costs fer five, seven and 10 cheapest system is not necessarily a 
years could be compared for the bargain. If it required extra FIEs or 

semi-flnallsts. person-hours to work-around 

It Is important to note that costs tern problems and Umitatloris. 
alone were not the sole factor In rat- 
ing systems, but rather their ‘price 8. Semi-finalist ranking 
performance.* that Is. the comblna- At this point the vendors were 
don of thdr scores In demos, tele- ranked, based on all of the cummu- 
phone r ef ere n ces, user manuals. lated results: system demos. 
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tetephaie refawioes. user manual 
reviews and prtiinitn£uy contract 
ternos. Each department was 
to vote for their preferred vendors to 
procee d with in the search, with 
consideration being given to ellmi* 
rating at least one vendor due to the 
time and ocpoise involved in the 
next step: making site visits. The 
results generaJfy followed the chart 
shown in Figure 5. which shows 
both the raw scores from each step, 
as wdl as how thty were weighted to 
place nxve en^ha^ in such steps 
as telq>hQne references than demos. 

At this stage, preliminary price 
discussions were held with the ven- 
dors. s piritin g discounts to help the 
Anns keep in the running. N^sndois 
were told that price was not the sole 
factor in MMS's decision, but that 
th^ could hdp their by offer- 
ing discounts now to avoid being 
e l lmlrate d on other grounds. This 
iterative process of requesting dis- 
counts proved to be voy valuable tn 
the long run. as vendos generally 
ofkr their most fiMrorabie t er m s in a 
competitive situadon. not when they 
are told they are tlie winner 
scd^ on RFP sccres. 

9. Site viatta 

This step In the selection process 
tnvotvcd users traveling to an 

actual ^ser practice of the two final- 
ist vendors to see their systems In 
live operation. Neart^ sites were 
requested for several reasons: to 
lovm MMS's costs for travel, to see 
the systems in operation in the 
demanding New York envUonment 
and to observe local service and 
8UF*-ort levels £ar aw^ from veridor 
her^oquartefs. Interesdngly enough, 
one of the semi -finalist vendors with 
L supposed nadonal presence could 
not arrange a local visit tn New Yotk. 
stmpUfytng our dedsion as to w^ch. 
two vendors were the finalists. 

10. Contract negotiations 

The last step tn the prtx:es5 
involved stimiltaneous co n tract n^o* 
dadons with the two finalist vendors. 
This minor detail deserves reinforc- 
ing. as mai^ practices make the mis- 
take of telling one vendor they are 
the winner based on their RFP score, 
thus losing the negodadng clout of 
co m pe ddon . Both of the finalist ven- 
dors’ omtracts were ocamined in 
detail, and extensive lists of issues 


drawn up. whldi our consultant then 
reviewed with vendor CMCUdves on 
site. Discounts woe again requested, 
based on our consultant's knowledge 
of the going rates for systems and 
typical price reductions vendors offer. 
Thus, the consultants also served as 
a Ughming rod for any ill will in the 
cnntiact n^odatlng prtxxss. leaving 
MMS with the vdilte hat for ongoing 
relations. 

MMS management was then 
apprised of the results of the n^od- 
adons. and decided v^ch vendor 
offered the best co n tract based on 
price as well as co n tract terms and 
Including such areas as response 
ome guarantees, warranties, reme- 
dies and other factors. Thanks to the 
compedtkm between the two finalist 
vendors, even further discounts were 
requested, this time by MMS direct^ 
to ‘close the deal.' The result was an 
excellent price paid for a top-notch 
system, one that was supported by 
Isoth the users and pl^aiclan 
management. 

Coacluaioa 

There are many ways a medical 
group practice can evaluate s\stems 
belter than the traditional RFP: 

• Involving end users heavlh* in 
evaluating ^lems not ordy gains 
their detailed input on features 
but also increases thdr “buy in': 

• Structured checklists can make 
steps such as telephtme refer- 
ences and site visits as quantifi- 
able as arw RFP score; 

• Perusing user manuals not only 
avoids marketing hyperbole but 
also serves as an excellent prod- 
uct definitton for the contract: 
and 

• Keeping two vendors in the run- 
ning at the end. rather than hav- 
ing a single RFP winner, greath* 
increases negotiating clout. 

We hope these techniques will 
assist other practices in their search- 
es for new information ^tems. Just 
as systems have progressed enor- 
mously since they were first intro- 
duced in the 196bs, so loo must the 
process by which we evaluate and 
select them. 9 
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what You Need To Know From Your Computer 


Many administrators start their search for a new 
information system by iooking at the weaknesses in their 
current computer system and finding a new one that 
addresses those weaknesses. This approach can result in 
some missed opportunities to find a system that realty helps 
you improve the strategic management of your medi^ 
practice. Start your search by looking at the in/brmation 
you need to run your practice ' remember that you are buying 
an information system. Any practice management system 
can help you do billing, insurance and collections: you 
should look fora system that helps you manage the practioe. 

As a 'second generation' comp ute r us et . yow s hould- 
be using it to run yourpractice. Perhaps some information 
may already be available from your current system, or you 
mi^t be able to generate some of the other recommend 
information by manially combining two or three existing 
reports. Butdoesn'tthiscutintoyouralreadyscarcetlme? 
And isn't it really the job of your computer information 
system to help you save time? 

We believe you need to use a number of different 
statistics to help you manage your practice. Managing the 
information will alert you to potential problems and 
possible solutions. And this mates your practice more 
profitable and successful in the long run because you are 
better able to quidcly adapt to changes in the business 
environment. 

OPERATIONS MANAGEMENT REPORTS 

There ate a number of reports you should review each 
month. The first of reports allows you to look at your 
practice operations to see if there are any problems 
developing. Forexampie. you may findadeoeasein staffing 
expenses when a part*time billing clerk leaves. If A/R 
increases at the same time, you might guess it is becaise 
the clerk is gone, but if your coliealons acttvities (letters 
and calls) remain unchanged, the increase in A/R is probably 
because a payor has slowed and not because your staff Isn't 
picking up the siack As you can see. using multiple statis- 
tics allows you to quickly focus on the real caiseof a problem. 

PatiMtt Flow 

Statistics that show how quickly patients are moving 
through the physician encounter cycle can be used to 
improve efficiency. Among these statistics are: 

• Percentage of apptentnrents kept Are your 
no-shows increasing or decreasing? Are the 
no-shows associated with a particular payor or 
physician? Could you reduce this with better 
pre-appointment reminders? 

• AppteatBeetwaltiiif tlrae. What is the lag between 
the time the patient calls to make an appointment 
and the actual appointment date? (Do not include 
scheduled follow-ups. periodic check-ups. orwell- 
child visits.) Could you be losing new patients be- 
cause they cannot be scheduled in a timely manner? 


• Office waiting time. What is the lag between arrival 
at the office and the time the patient sees the doctor? 
Uniting is the most common oimpiairtt by patients, 
so you should be tracking it. 

SattAeltow Snrreia 

Statistics about patient satisfection are invortant In 
improving customer relations. In addition, manymanaged 
care plans are beginning to evaluate your practice based on 
such measures. Yburstatisticscanserveasanearlywaming 
system that allows you to correct {xoblems before too many 
patients become dissatisfied, ^ur practice management 
system may not be able to provide these reports, but they 
are still important. 

• Naraber of patient satlifactioB fonns dimribated 
and nomber of fonns ccdlecied 

• Sadifactloa scores by payw trends. Keeptrackof 
these trends over specific periods of time to measure 
your practice's satisfaction quotient. 

amiMfe C ollections 

Traditionally, this is one of the key focuses of monthly 
praaice management information. It is still impcxtant to 
review, but you should look at other indicators to explain 
any changes. 

• D ate of s ervtec to datfr«M>Ullac la^ This can 
point to possible problems getting surgical procedure 
or hospital bills out. Review these statistics by 
physician to mate sure that everyone is getting their 
paperwork in on time. 

• Date^-bUIiag to dMe<of-pafmeiit lag (A^ng). 

This is the same A/R aging ^at you have been using 
for some time. It is most appropriate to gaige this 
against historical trends in order to predio if an 
increase or decrease in lag will cause reveiue 
fluauations. It is also important to look at this by 
payor to see if any plans are slowing down payments. 

• Total A/R baiaace by payor (wttbhMBricai treads). 
This can also be reported as 'days oi revenue' (payor 
A/R 4-payor annual revenue) to get a measure that is 
not sensitive to revenue growth. 

• CoUectioBS OLtliltlea. ^bu should track the number 
of collection letters mailed and the numberof patients 
called. VbumayfindthatanincreaseinA/Risooirela- 
ted to a decrease in collections activities. 

Hffngial Managengnt 

Lastly, you have to keep an eye on how operations 
impact practice financial results. 

• AccooBts payable. Express as a share of total annual 
expenses so you can see if you are sitting on two 
weeks worth of bills or three months. 

• Bank accoont balances. Cotuinuedon /Bee 4 
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inrued from 3 

• Income and expense statement Annualize your 
year-to^te figures. Compare to historical trends 
and industry averages on a per-physidan basis. This 
will help you see the financial impact of various 
operational changes. 


The operations management reports discussed above 
.r you to look inside your practice to improve your 
temal operations. This second set of reports allows you 
look at factors outside your practice. Vfe recommend 
at these be reviewed once each month to provide an early 
aming of potential problems. For example, if you see 
ferrals from one office suddenly drop off, you may be able 
) get them back by finding out what has cajsed the referring 
nysidan to refer elsewhere. As discussed above, the use 
f multiple statistics allows you to quickly focus on the real 
uise of a problem. 

atIcBt Sonreea 

• Oeoracniphlca. fou should look at where your pa- 
tients are comitrg from in terms of payor, referring 
physidan. employer, home and work zip codes. For 
ea^ category, you should report current month 
figures and watch for trends. If your referrals from a 
particular doctor are decreasing, find out if they are 
unhappy with your office and try to fix the problem. 

• Scheduled vtatti. Look at your appointment log to 
see if visits already scheduM for the next month are 
above or below average. This could serve as an early 
warning that the next month will be particularly busy 
(or particularly slow) 


HMOs and consumers are increasingly interested in how 
you care for patients and what your trade record is. >bu 
should have an information system that allows you to 
collect and report this, \bu have good doaors - this lets 
you prove it 

• Prooedore frequency. How many services did you 
provide last month? How many were office visits and 
how many were surgeries and/or procedures? \bu 
should be aware that a decrease in office visits this 
month will cause a decrease In surgeries next month. 
This report could let you predict the revertie shortfall 
and prepare for it. ^bu should compare this to histor- 
ical trends and report ft by doctor and by payw. 

• RVUt Per Pedent Seen. Relative ^^lue Units (RVUs) 
measure the complexity of each service. ¥3U should 
look at this statistic per patient seen to see If you are 
doing more ot less per patient. Track this statistic by 
payor and by doctor. Remember that one patient 
seen three times is still counted as just one patient 
seen. HMOswiil evaluate you on this, so you should 
know what they are going to say 

• Visits Per Petfeet Seen. In tandem with above mea- 
sures. this can tell you if your doctors try to does rruch 
as possible during one big patient visit or if they like 
the patient to a>me back for each separate service 


• Refeneb Per Petteet Seen. Hcjwoften are you refer- 
ring patients outside the practice? What services are 
you referring them for? Tb whom are you referring 
them? HMOswiil know this and will measure you on 
this, so track it. Such HMO measures can mean 
thousands of dollars in additional reimbursement, 
so you have ample motive to track these figures. 

• AdnUssians and Length <rf Stay Per Patient 

« Prescriptions and AWP Per Patient What are your 
prescription patterns, and what is the average 
wholesa le price (/WP) of drugs prescribed in a month? 

• Diagnosis Code Preqaeaejr. What kinds of 
conditions are you treating? If you have enough 
diabetics, might it be worth bringing in a part-time 
dietitian to do nutritional training? 

CoBtieet Management 

Lastly, we recommend a family of reports that tell you 
whether payor contracts are profitable or not. 

• C3rarges-Co-CoUectioas. Fbreach payor, what isthe 
ratio of charges to collections? Ybu should also look 
at denial rates and write-ofb by payor. This report 
should compare actual payments to the payor fee 
schedule. P^rs aren't always good about telling you 
they decreased their fees, but this report will show it 

• Cost of Providing Servlees. Any system ^uld 
allow you to estimate the cost of each service to allow 
you to estimate the profitability of a fee sdredule or 
capitation contract. 

• Capltatton Profitability. Compare the reverve per 
RVU for each different payor. Mxr may find that you 
are paid more under capitation or you may find it is 
a loss. In either case, you carr male an informed 
decision reganling the profitability of a contract now. 

R>r most of the measures above, we recommend that 
your reports show trends over time reported in a rolling 
five-year historical average, a roiling 12-month average, 
current year-todate and current month. If your practice is 
experiencing rapid growth, you should report the figures 
on a per physioan basis. 

If you are reviewing these reports on a regular basis, 
you should be able to fix problems before they get too big. 
And. while many indicators will not change si^ificantly 
from month to month, you should always keep an eye on 
things. LiJretheenginetemperaturegaugeinyourcar.marty 
measures don't change often, but are important to heed 
when they do change, A good information system gives 
you more of the dials and indicators you need to run a 
successful practice. 

Information systems today need to do more than simply 
handle billing and colleaing. An informed manager must 
rely on today's statistics to make informed decisions about 
the management of your medical business . While the 
rextts you should monitor will vary depending on your 
mactice's managed care penetration, these statistics are 
vital in today's environment. If your computer system can't 
provide them now. consider their importance as you locd: 
to upgrade your technology. Vbu cannot use yesterday's 
technology to monitortoday's medical practice. 
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Keys for integration 

Choose a system that does it right 


by Tom Skelton 


Abstract 


No kmger Is it an issue of whether to Integrate 
clinical, administrattve and managed can tn&mnaoon in 
an ambulatory care setting, but rather how quickly and 
efficiently to acccsnpUsh this objective. 'There is industry- 
wide consensus that data should be captured otkc so 
that it Sows through the system with lu additional user 
acttvtQr. WUh an abundance of attihuigm^ settings, vary- 
ing wid^ in size and scope, promising high quallQ' with 
inqnoved efficiencies and cost savings, it become s the 
r e sp o nsi bility of the practice to select the 

"dream madiine." The tight dioloe will enable practices 
to debver on their pnsntses. 

material may be protected by 
eopyr^ht taw (TWe 17 UA Code). 



Repnnied with permission from the Medical Group 
Management Association, 104 Inverness Terrace East, 
Englewood, Colorado 80112-530$; 303-799-1111. 
Copynght 1998 . 


o longer is it an issue of 
^^^ether to integrate clinical, 
k admintetrative and managed 
v^care information in ambulatory 
'^settings, but rather how quidc- 
'ly and efficiently to accomplish 
this objective. There is indus- 
try-wide consensus that data 
should be captured once so 
that it flows through the 
^tem with no additional 
user activity’. 

The challenge becomes 
udiich ^tem to choose to 
create seamless integration. 
Until rccentty, the selectiOTi 
was less complicated since 
few integrated products met 


market demand. The scene 
has changed, and cuirentty. 
there arc several systems that 
allege to offer a total solution. 



Tom SkeUon Is woe 
presidenx e/ fv s ea re h 
& deuHopmenc Medic 
Computer Systems. 
860i Six Forks Road. 
Suite 300. RolettA SC 
7761S-296S. 


‘‘Dream machine'* vs. 

“the jalopy" 

When evaluating products, 
this analog may be helpful. 
Think of a sleek automobile 
with all the parts ^chroni2ed 
for peak performance. The 
engine turns ovo' without a 
hitch, and all systons are ‘‘go’ 
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evoy day of the year. Sur^, the 
dream machine requires service 
and TLC. but every quali^ vehicle 
requires maintenance to keep in 
top form. 

On the other hand, picture the 
jalopy, a piecemeal conglomeration 
of p^t finishes and disparate parts. 
Nothing matches on the outside, and 
under the hood, things get worse. 
The parts simply don't mesh — it's 
out of tuiie no matter how much 
servicing is provided. 

When in the market for an 
integrated solution, remember this 
illustration. All the conqaonents of a 
^rstem should work In concert to 
accomplish the goal of truly inte- 
grating data, not simpty interfacing 
pieces of information. Like the sleek 
automobile, the dream machine for 
data integration must deliver high- 
caliber porformance every day. In 
today's competitive health care 
climate, a practice cannot a^ord 
false starts or breakdowns. 

What's hot. what's not: 

Hie selection pr oce ss 

^^^th many models from udUch to 
choose, the astute practice manager 


must focus on key capabiliti^. 

Some of the 'must haive* features 
as described will achieve true inte- 
gration: anything less results in data 
Interface, not miration. 

Single input of data — Staff 
needs to enter data once and 
;:onsider the job done. Since patient 
care often spans many days and 
encounters, look for a system that 
requires just one patient registra- 
tion over the course of treatment. 

Be aware that single registration 
also can be accomplished with an 
interface, but this solution is less 
deslrabie. An Interiace between two 
^tems requires maintaining two 
sets of master files and maintaining 
translation Ud>les in between. This 
situation can be tedious, can 
Increase staff costs and m^ be 
error -prone. 

Accessibility of data — Physicians 
and staff should be abte to extract 
information from a single query 
across all modules of the system — 
including managed care, r^nteai and 
financial — with premier securitv. 
Providing this access, where appro- 
priate. is a )tasf function of an inte- 
grated system. 


Consistency of data — An inte- 
grated system should provide consis- 
tent datL For enmple. you can't 
assign a patient thrK different iden- 
tification numbers over three dllfix- 
ent solutions and expect to extract 
consistent data. Remember the 
dream machine — everything has to 
mesh for consistent output uid opti- 
mal p erfo r mance. 

Data availability — During the 
caregtvtng process. fix>m point of 
care throu^ frdlow-up. data should 
be available to authorized personnd 
where and when it is neer^ Look 
for a system that allows various 
authorized levds the caregtvtng 
team to access data in mult^ 
treatment settings. 

Data flenv — E}ata captured at the 
pcxnt of care should flow naturally 
into the administrative and managed 
care modules of the ^tent This 
Qow of Information obviates redun- 
dancy and also m^ provide an 
important step in the devdt^xnent of 
an ekc^Tonlc medical record (EMR). 
By carefully controlling the flow of 
data, you improve the quality and 
consistenQr the InfRTDation. both 
essential Ingredients fra* an EIMR. 
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Data management — the 
bottom line is a system that allows 
simultaneous access to riininai 
financial and managed care data will 
enable practice managers to extract 
the Information need^ for accurate 
cost and quallty-of-care analysis that 
leads to a better business outlook. 
This can be best achieved by select- 
ing a system that provides the ability 
to ana^^ and “mine" the 

The trtiole may not be the sum of 
the parts 

The decision to upgr^le an 
existing system or buy a complete, 
int^rated product is critical and 
is sometimes driven by resouree 
dollars. Wth any purchase of this 
m ag ni tude, cost is a primary con- 
cern. Look to long-term, valuable 
solutions that, in the end. will be 
money well spent. 

Consider the implications of a 
short-sighted decision. If the vendor 
being considered does not have a 
single integrated solution, you may 
be forced to buy one ^tem for clini- 
cal and one for administrative func- 
tions. Once down that path, you may 
find yourself getting in deeper, with 


MBS/Net Inc. 

• Save 90% of your transcription 
costs by dictating as usual and 
letting the computer do the 
transcription. 

• Thoroughly a Year 2000 
compliant billing and decision 

support system. 

• Integrated electronic medical 
record (EMR) system. 

• Maximize reimbursement 
from patients and third parry 

payers. 

• Full billing services 
(Service Bureau). 

MBS/Net Inc. 

Mordy Pelleg, President 
6^ Beta Drive 
Mayfield Village, OH 44143 
(800) 682-2479 
Fax: (440)461-7038 
MBSNET@AOL.COM 


All the compo- 
nents of a system 

should work in concert 
to accomplish the goal of 
truly integrating data, not 
simply interfacing pieces 
of information.*' 

disparate products that are incom- 
patlble and Incapable of manying 
the data, Even tf the products you 
choose are both excellent, the task of 
coordinating their functions and 
blending their data will become more 
difficult as each vendor «ihances its 
product in the future. With multiple 
vendors involved, a tnterfece 
prompts finger -pointing In the midst 
of crisis. 

Standards have become essential 
due to the many disparate systems 
in the current market, but standards 
are merely* an attempt to deal with 
the ugly problem of the under 
the hood. HL-7 and similar stan- 
dards do not necessarlty accommo- 
date your data needs, may be slow to 
addr^ new releases of data and 
suffer from differing interpretations. 
As a result, you be dealing with 
two vendors, stuck In the middle of 
trying to figure out how to data 
back and forth. Sometimes, when 
enhancing exisOng systems, you 
may have to seek a vendor that 1$ 
amiable of integrating with your 
existing capabilities. 

When it comes to calculating the 
cost of a system, consider both the 
hard costs of Impkmenting an inter- 
face and the soft costs that may sur- 
face when one vendor has never 
tested its software with the other 
vendor you selected. You become the 
quallQ^ assurance team, burdened 
with consumption of staff and 

a drain on resources. 

a Tendon 
What to look for 

FoUowtng is a checklist for prac- 
tice managers that may assist in the 
devdopment of a vendor request for 
proposal as well as the vendor selec- 
tion process: 


• experience In Impiemenong inte- 
grated solutions — Is the vendor 
new to the market and planning 
to use your practice as a guinea 
pig? The vision of an integrated 
product suite is one shai^ all 
vendors; the real issue is does the 
realiw match the vision? 

• current technology — Does the 
vendor have the most up-to-date 
solutions? Do your homewwk and 
compare product offerings: 

• trairiing programs — Everyone 
on yoiu- staff. Including the 
doctors, needs this educational 
component 

• implementation team — Vendor 
shorild identify the team pl^rers 
and articulate quallflcattois and 
credentials; 

• ongoing support — Ascertain the 
scope and timelines of services 
available: 

• financial stabilify — Assess the 
wherewithal! of the corporate entity: 

• consistent pattern of new software 
releases — - Check the vendor's 
track record for innovation; 

• reliability — Seek assurarxxs that 
the vendor will deliver on its 
promises. Caveat emptor ^rplies 
to all practice managers: 

• industry leadership — Loc^ for a 
vendor with wide 
geographlc/nadonal lecognitkxi: 

• in-house vs. subcontracted 
services — Services should be 
fmwided dlrectfy from the vendex' 
to the customer to ensure 
reliability: 

• references — Check reference s 
carefully to assess vendor perfor- 
mance with practices of .similar 
size, scope and specialty: and 

• comparison shop — Review Indus- 
try publications and attend trade 
shows to ensure market krxiwledge. 

Look ahead to an era where 
seamless Int^ratton Is a require- 
ment for successful practice man- 
agement In the health care planet 
of the new millennium, the ability to 
capture and Integrate data may well 
hold the key to survival. Choose 
your system carefully, selecting the 
best-of-breed solution: a dream 
madilne for int^ration that will 
position your practice ahead of 
the pack. ^ 
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Electronic Medical Records: 
A Practical Guide 
To the Journey 


hysicians striving to improve 
both quality oi care and practice 
efCcienc)’ can look to a new 
technology— the electronic medical 
record (EMR). EMR is a set of com- 
puter-t se applications that targets 
improvement in three critical areas of 
. clinical practice; 

L.) ^Vork^low; 

2. ) Documentation; and 

3. ) Decision making. 

Dozens of software companies 

have entered the EMR market, provid- 
ing an array of products. Some focus on 
EMR as a separate, niche markcL Some 
are extending their work in physician 
practice management systems. Others 
are adapting their solutions for 
hospital clinical data reposito- 
ries for use in ambulatory care 
settings. 

Today, only 5 percent of 
physicians use EMR. WitWn the 
next five years, however, that 
number will grow to more than 
50 percent 

Be an Early Adopter 

Should you invest now? Should 
you wait until the market shakes 
out? Read on— your EMR jour- 
ney may start here. 

Just as with other technolo- 
gies. it is the earh' adopters who 
will gain the competitive advan- 
tage in the next few years, as the EMR 
field narrows down to a dozen or so 
*be$i solutions.' Understanding the 
central issues of EMR software, lech- 
nolog>'. services and company manage- 
ment will help you as you start out 
on the exciting and rewarding journey 
to EMR 

EMR should present you with data 
about a padent in a way that is easier 
and that gives you more informadon 
than if you referred only to the chart 
The following EMR features arc among 
the most important to consider for 
retrieving information about a padent 

Patient health summary' dis- 


play; Does the EMR present informa- 
uon in a summary form that gives you 
a good snapshot of the most relevant 
padent data? 

Comprehensive data displays: 
Does the EMR maintain and r splay 
such historical information as; 

• Past medical, family rnd social 
history; 

• Allergies and immunizations; 

• Tests and procedures pending 
results: 

m Clinical results; and 

• Medication history? 


MICHAEL LAKE 



Images: Does the EMR support 
maintenance and display of EKGs, 
padent photographs, radiographic 
images, drawings and other nontextual 
infomudon? 

links among chart elements: 
Does the EMR hnk the many elements 
of the padent chart to facilitate naviga- 
don and to establish clinically relevant 
associadons? 

Health maintenance reminders 
and alerts: Does the EMR allow you 
to establish clinical rules for reminding 
you when to see a patient (e.g.. a 
woman patient over 40 years old with 
her last mammogram performed more 


than one year ago)? Will it alert you to 
seriously abnormal values? 

Embedded report writen Does 
the EMR provide a tool that is easy to 
use and allows you to search its database 
to produce practice-specific reports? 

Documenting Care 

EMR also should allow you to document 
padent care at least as comfortably as if 
you were writing in the patient's chart. 
Consider the following features: 

Notes entry*: Does the EMR pro- 
vide tools such as templates, macros, 
user-defined forms and others that 
facilitate entry of a clinical note? 

Managing problems and chief 
complaints: Does the EMR 
make it easy to enter multiple 
problems and chief complaints? 
Does it provide space for entering 
status informadon about them? 

Dictation: Does the EMR 
support dictation for clinical 
notes and reports, including the 
embedding of recorded voice 
snippets into a note? Does it su^v 
port the scanmng of previously 
dictated and typed documents? 

Data structure and 
encoding; \'’hat elements of the 
patient s record does the pro- 
gram structure and encode so 
that you can use the database to 
analyze clinical practices and 
business functions? 

Entering medications; How do 
you enter new medication orders and 
refills into the system? Can the EMR 
check on drug interactions? 

Entering orders: Does the EMR 
support the entry of orders for tests 
and treatments? Can it link these 
explicitly to medical problems? 

Multiple formularies: Does the 
EMR support multiple formularies and 
multiple lists of laboratory tests by 
payer? 

Entering charges: Does the EMR 
support the entry* of charges and pro- 
vide tools to ensure proper visit coding 
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A Kurenase or e rannercntpi 

EMR. is an emei^ns ^h&olofy. Com- 
panies imja^ve flsar software each 
year, all the key suppliefs are adding 
features at a rapid pace. Therefore, the 
product with the richest features this 
year may not the mo^ ftinction^ 

next year. But tfwre are other issues 
to consider besides the software when 
makirtg your EMR decision. 

One is buying what strategic mar- 
keters term a “wlmie product"— « prod- 
uathat provides a 100 percent solution. 
For EMR, this includes training, imple- 
mentation. intention, re-engineering 
and support services. These ensure the 
successful integration of die software 
into your office envinminent. so that 
you can achieve the expened benefits. 
Most EMR projects succeed or fail 
berause ofttie sui^rt services, not 
because of a particular feature's 
unavailabdity or matfunctionlng. 

According to venture capntaiists 
and invesBnent bankers, the three 
most important criteria in selecting a 
company for invesoneni are "Manage- 
ment management and management' 
Physicians should apply these same 
crkeria when sekctog an 
EMR system, 

Oriiy an EMR supplier 
with strong management will 
be able to raise the capital 
rtecessary to continue to com- 
pete in this complex market 
Strong management can han- 
dle growth: it can commie to 
a focused vision. It also can 
handle the int^departmental 
boundary issues can 
afople a company. Look for a manage- 
ment team thiu has bees together 
a while and that has established an 
organizational culture built on trust 
accountabiUty and performance. 

Frame your El^ decision in the 
loi« term U is the partn<^hip, as 
much as the softu’are, that delivers 
the benefits. 


UlC . 

work effectively on portable nottpKi 
devices and wireless networks. 

EMRs also are taking advantage of 
Internet technology and can run under 
browsers like Netscape or Microsoft 
Explorer (see Today's Internist, Sep- 
tember/October 1997. page 35). 

If EMR is a journey, take the solid 
technology’ path. EMR vendors that 
develop alternative, proimetary tKhnoli>- 
gies pay a high price in the long term. 
Stay close to the most standard technolo- 
gies. and you will be on solid ground. 

Bon Voyage) 

The journey toward EMR holds enor- 
mous promise for our health care deliv- 
ery system. In the long term, ilMR will 
grow into a bilMon-dollar-per-year indus- 
ffy. We win invest tius much because 
the returns of better quality care at a 
lower cost are worth 10 times ihaL 
Early returns from EMR in your 
practice will involve cost savings from 
reduced chart pulls, lower mnscripticn 
costs, lower premiums for insurance, 
and a gener^y enhanced workflow. 
Many offices are improving revenues 


through more accurate coding for 
encounter claims. Clinical quality will 
improve through fewer mediation 
errors, better accessibility to the chart, 
and better clinical documentation. 

Consider these four concluding 
admonitions: There is no perfect prod* 
ua Invest now. Don’t wait Take 
journey. O 


EMR should present you with data 
about a patient in a way that is easier 
and that gives you more information 
than if you referred only to the chart 


j)d accurate transfer to a bilbng system? 

Handling referrals: Does the 
DMR maintain a list of rofening physl- 
:ians by payer, provide guidelines for 
-eferrals. and facilitate communication 
af relevant clinical information? 

Enhancing Workflow 

EMR should enhance the workflow in 
your clinical practice by supporting the 
communication of patient-related issues 
within the office. The following fea- 
tures are among the most important 

Scheduling: Does the EMR pro- 
vide patient scheduling? Does it link the 
scheduling and messaging fanfrionp? 

Messa^tg: How does die EMR 
enhance intra-office communications, 
such as patient rooming • ssignments, 
requests to phone-in prescription refills, 
and other issues? 

To-do lists: Does the EMR pro- 
vide a todo list automatically flagging 
charts for signature and test results to 
review? Can this list incorporate 
reminders from the physic^? 

Patient letters: Does the EMR 
provide a way to generate patient letters 
automatically for a variety of purposes? 

Concurrency model: Does the 
EMR make the chart available to all 
office staff concurrently, so that a nurse 
may enter vital signs while a physician 
enrers notes? 

Intier&cing to extern^ systems: 
Can the EMR send and receive informa- 
tion from practice management systems, 
laboratory systems, transcription sys- 
tems and hospital information systems? 

Usability 

Rnally, will you use the E.MR product’ 
Consider these key issues of usability; 

Intuitiveness: Is the EMR's user 
interaction intuitive? Does it mirror the 
way you usually work? 

Speed: Can the EMR handle the 
routine, repetitive tasks quickly? 

Customimbility: W^t aspects 
of the EMR can you tailor to your own 
preferences? 

.Authoring environment: Does 
the EMR haw as authoring environ- 
ment to develop templates, patient 
questionnaires and other tools? 

Clinical content Does the EMR 
l»t>vide the content for the formularies, 
interaction rules, common note t«n- 
piates and forms? 

Accessibility: Is the EMR easily 
accessible in the examination room? 
Can you ;^ass the EMR ftom outnde 
the office? 


Toehnotagv Wan 

None of us has a crystal balL We're 
never sure where the next important 
technology will spring up. Generally, 
the architecture of toda/s EMRs 
assumes a client u^g personal com- 
puters running Microsoft Windows 95 
or NT and a system server running NT 
or supporting Microsoft SQL, 
Oracle, Sybase or Informix. Many 
EMRs also run on a Cltiix server and 
can use lowcost network computers in 


Mlcha«l Lsk«. e* eutkority on EMR buti- 
na devtiopment. has dntlopisi, implemeietd 
9od mafietd elinieel in/sninanon systems ftrr 
Toort Ikon 25 yean. As the dittf epemting offi- 
cee of BtU Atlantic HealUteart System <naw 
Oteis). he was at tke/orefmt in dntloping Ike 
eompvtenied patient record. As eseentise vice 
pntident at Oceanie' ■u emng leilk tcs partner. 
Kaiser Fermenentt—ke helped launch one of 
the first pilot rites for ^truetnrtd eiinical notes. 
Rieentiy. as president of Circle Sassan inc. . San 
Frottdsa, he has tiiorkedn strategy and ksia~ 
acB development seith EMR s^hoare tompanm 
and their eopitai sosirtes. 
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Computerized Patient 
Record Systems: 

A Survey of 28 Vendors 

A lot has changed since our 1995 survey. If you’re thinking of 
computerizing your recanis, here's data you’ll need to know. 

Steven M. Omsiein, MD. Ruth G, Jenkins, MS, and Robert L. Edsall 


T wo years is a lifetime in the 
world of computers and 
soinvare, and it was neaHy 
two years ago that family 
PnuTice Management pub' 
lished "A Vendcw Sur^•e^• of 
Computerized Patient Record Systems" 
[Februan' 1996) — and that was based on 
a 1 995 sur%‘ey. It would be high time for a 
second look even if computerized patient 
record (CPR) systems were an established, 
mature technolog>'. But since the industry’ 
is growing and evolving at the same time 
that family phi'sician interest in CPR s\v 
terns IS takmg hold, we felt that a return to 
the subjea was imperauve. 

Survey design 

We used the same sun'cy as in 1995. It 
was 31 pages long, containing six maior 
sections, each with several subsections, 
and a total of 324 questions. (Sec 'What 
the suney covered." page 48, for a more 
detailed description of the mstpument ) 
Most questions required simple check-off 
responses; some were open-ended. The 
survey form provided ample room for 
respondents to elaborate on thetr answers. 

We compiled d«criptive information 
about the vendors and their products 
from their responses to sections {CPR 
svstem market, functional requirements 


and costs) and V (Company information) 
of the survey. We also compiled discrete 
responses to most of the questions from 
sections t (General design atihbutes), 11 
fHeaidi care provider functionality) and 
in (Patimt hmctionality). We called the 
vendor references (practices actually 
using the systems) to corroborate respon- 
ses vendors whose products seemed 
dramatically better than others. 

We compared the vendors' responses 
in the seoions on general design, provider 
functionality and patient functionality, 
and we assigned section scores using a 
one- to five-star scale. We also calculated 
an overall score b>' averaging the scores in 
diese t hr ee sections (see '‘Composite rat- 
ings of 28 CPR systems,*' page 51). 

Respondent charaeteristies 

Information about the 28 re^nda^ ven- 
dors and ther CPR products is presented 
m “Charaaeristics of vendors and CPR 
systems." page 52. Of these vendors, 
seven had also responded to the 1995 sur- 
vey. Eleven of the 1995 survey respon- 
dents didn't respond to this survey. 

Market maturity. Like the 1995 sur- 
vey’ this one reveab the relative youth of 
the primary care CPR market. Thineen 
of the 28 venitors released their first CPR 
products within the last three years, and 
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mms 

The authors 
used an extensive 
survey to ctxnpare 
twubdsle eontput- 
erized medica] 
records (CPR) 
ayitenss. 


^ Randtt provid- 
ed a snapshot of 
28 CPR systems 
from a young and 
quiddy developii^ 
mdtstry. 


► The survey cov- 
ered chanciehsttcs 
^the vendors and 
dse attended mv- 
kets for their sys- 
tems as %v(di as the 
design of the sys- 
tems themseKes. 


^ Features arc 
compared under 
the headings gen- 
end den^, heaUi 
care provider hme- 
htmaiity and pa* 
tienf functionality. 


only seven vendors had CPR systems 
before the beginr^g of this decKJe. Most 
vendors continue to update their prod- 
ucts. Nineteen respondents described 
1997 releases, and five described 1996 
releases. 

Operating systems. Most vendors 
offer versions of their products far several 
operating sysoms. Tvrenty-stx use one or 
more of the Microsoft Windows operating 
systems, ei^t continue to have E^S ver- 
sions and seven have Unix versions. Only 
one vendor has a Maciniosh version. 

Intended markets. Most of the respon- 
dents’ products are intended for practices 
of any size. Compurerized Patient Reconis, 
Dos!»b' of Cliwirai Informaticffi (DCI) and 
SOAPvwe aren’t intended for multisite 
practices. Clinical Management System. 
EDS/IntcrPracticc System, Encounter and 
Pathways Smart Medical Record are mar- 
keted primarily for larger and multisite 
practices. No intended market was speo- 
fied for Sman-Med. 

live sites. Five of the vendors have 
10 or fewer sites using their software, 
nine vendors have 1 1 to 100 sites and 
eleven vendors have more than 100 sites. 

Only seven vendors 
had CPR systems before the 
beginning of the decade. 

The numbers of sites using Clinical Man- 
agement System, NextCen and The 
Medical Manager weren’t reported. 

Cost. Seventeen vendors didn't 
report s>*stem costs, so the cost infonna- 
tion provided in the table ts of limired use 
in comparing systems. Among those who 
did, the estimated costs ranged as follows: 

• For an office with one healdi care 
provider and five woricstauons: $8,500 to 
S70.000; 

• For an office with eight heahh care 
providers and 40 workstations. $55,000 
to S280.000; 

• For a practice with three sites, 20 
health care providers, 100 workstations 
and appropriate linkages among the sites: 
S150.000 to 5700,000. 

A note about EDS/lnterPraaice. 
Betw«m administration of the surv'ey and 
publication of this article. EDS ceased 


acuve marKcuiife w. — .. 

Sy^em. According to an EDS spokesman, 
the company is supportii^ the prod- 
ua and is looking for a partner to work 
with in re-entering the marketplace. In 
the meantime, the spokesman says, the 
company will sell the system to interested 
muliisite practices. 

General design 

For an overview of the designs of systems 
covered in the survey, see "General design 
features of 28 CPR systems," page 56. 

Data elements. All the products are 
re^onably complete in the data elements 
they tack, although there is great vari- 
ability m the proportion of tkta elemeas 
that are coded (40 percent to 98 per- 
cent). In addition, a number of st-stems 
don’t support images. 

Structure and organization of dau. 
Most of the systems arc problem onent- 
ed, and some support a family onentation 
as well. Most include or allow the inclu- 
sion of several coifing systems, but only 
five have a built-in standard data dictio- 
nary. All but three of the tystems have 
graphical user interfaces, which allow a 
variety of dau displays, although some 
maintain a character-based interface in 
addition. Three vendors offer only char- 
aaer-based interfaces. Ail vendors report- 
ed that their products have rapid screen 
updates, and all but three car. highlight 
abnormal dau. All but two products allow 
customization of dau views. Twenty-four 
products have a summaiy* dau screen. 
Twenty-four allow’ simuluneous access to 
several parts of an individual record, 
although only 10 can display more than 
one record at once. Mo« products allow 
users TO search for specific patient dau by 
date and problem; only half support 
searching by text strings. All the products 
support dau entry by keyboard, 26 by 
mouse, 19 by light pen. 18 by touch 
screen and 17 by voice. 

Accessibility. Most of the CPR sys- 
tems give authorized users ea5>- access to 
dau. All but one support updating multi- 
ple components of a record with a single 
dau entry, simuluneous access by multi- 
ple users and modem access from outside 
the practice. Daily downtime {scheduled 
and unscheduled) was an hour or less for 
25 systems, one to two hours for two sys- 
tems and unreponed by one vendor. » 
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What the survey covered 

T he areas addressed in each of the six major sections of the survey are listed below, with the total 
number of questions in each area given in parentheses. 


I. General design attributes 

• Data elements: patient identifiers, patient 
activin* status histori^ database, social history, 
family history, risk indicators, prc^lem lis^ visit 
notes, vital signs, laboratory data, images, draw- 
ings, medication lists, immunization records, hos- 
pitalization infoimation, consultation reports, 
wrinen correspondence, reports of andllary stud- 
ies and customizable elements (1 14 questions}; 

• Structure and organization: orientation 
(problem ^d family orientation], coding and data 
diettemaries (five q^sdons); 

• Ease of use: user interfaces, displays, views 
and data input devices (13 questions): 

• Accessibility: multiple providers, modem 
and telephone access, and downtime for mainte- 
nance (fiw questions); 

• Interfax with financial and appoinmnent 
software and widi outside source of clinical data 
(eight questions); 

• Electronic mail: internal and external (two 
questions); 

• Training: help scre e ns, instructional material^ 
tutorials md training time (seven questions), 

• Omfidctualiri*: passwords, pssword mainte- 
nance, limited access by user and data elements, 
access audit trails, aiui operator notification and 
screen time-outs (10 questions): 

• Accuracy and integnty: error checking, 
access limiutions, audit trails of updates, data stor- 
age redundancy and backup mechanisms (seven 
questions). 

n. Health care provider functionality 

• Records management; results reporting, forms 
completion and record transmission (1 8 questions); 

• Individual case management; chart mainte- 
nance. reminders (prevention, chronic disease), 
health and functional status measures, clinical 


variable control charting, decision support (access 
to expert systems, practice guidelines, medical lit- 
erature), order entn' [diagnostic tests, medica- 
tions, other therapies) and documentation support 
tools (note entry; drawing tools, electronic signa- 
ture) (76 questions); 

• Administrative reports, continuous quality 
improvement and community-oriented primary 
care: patient profiles, patient satisfaction, provider 
jwoductivity and utilization, practice audie, query 
functions and report generation (14 questions). 

m. Patient functionality 

• Reminders: appointments based on protocols 
(prevention, chronic disease, etc) (five questions); 

• Access to infoimation in the patient record: 
office and home access (four questions); 

• Educational resources: printidile materials 
and catalogs of other sources (b-ochures, video- 
tapes, multimedia software, classes, support 
groups) (five questions). 

IV. CPR synem market, functional requirements 
and com 

• Intended market; small, medium, laige or 
muitisite practices (five questions); 

• Functional requirements; operating systems, 
file servers and workstations (seven questions); 

• Total system costs; costs for various practice 
configurations (six questions). 

V. Compai^ infimnation 

• fbmatiOTi (two questions), 

• Employees (fotir questions), 

• CPR system installations and users [seven 
questions). 

VI. Ref erenc es 

• Names of rrferences from small, medium 
and large practices. 


Interfaces and E-mail. Most of the 
products incorporate interfaces with 
practice management software, either 
from the same vendor or from another. 
Twenty-five products have interfaces 
with financial software and 23 with 
appointment scheduling softw'are. Twen- 


ty-five products have E-mail systems for 
use within the practice; 20 systems sup- 
port external E-mail. 

Training. Twenty systems provide 
context-sensitive help from ail system 
screens. Twenty-four have instructional 
matenais, and 24 have mantials, but only 
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eight offer muJtiniedia training tutorials. 

' Ten vendors reported that physician train- 
ing requires less than four hours, nine 
reported four to eight hours, six reported 
ei^t to 1 6 hours and two reported more 
than 16 hours. 

ConBdentiaitTy. All the systems have 
password protection, although only half 
require password changes at regular inter- 


vals and only two can generate passwuiL^ 
automatically. Twenty-seven of the sys- 
tems allow users to limit access to certain 
functions. 25 to specific records, 22 to sub- 
sections of records and 21 to discrete data 
elements. Twenty-four of the s\^ems pro- 
vide audit trails of access to the system, 
but onl)' nine warn the "sysop," or SN-stem 
manager, immediately when someone 


Composite ratings of 28 CPR systems 

Scores for ^eral design, functionality for health care providers anc 
determined as follows; 

* * * » Has 76 percent to 90 percent of the important funcuonalin' 

* * » Has 5 1 percent to 75 percent of the important functionality 

* • Has 25 percent to SO percent of the important functionality 

* Has less than 25 percent of the important funcuonality 

The overall score is based on an unweighted average of the three individual 

functionabn’ for pauents were 

scores, rounded to the nearest integer. 
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attempts to gain access without authoriza- 
tion. Twenty-one products use screen 
time-outs to limit unintended access. 

Accuracy and imegnty. Most of the 
systems maintain data accuracy and 
integrity in several ways. Twenty-two 
have error-checking algorithms for all 
data chat aren't free text, and 20 allow 
the system to be set up to limit data 
entry by specific users. Twenty-four sys- 
tems track which users enter data or 
make changes, and 1 8 maintain copies of 
originai data that are changed. Database 
integrm* is maintained by redundant real- 
time storage in 24 systems and by backup 
mechanisms in 27 systems. 

Overall. Clinic^ Master, Dr. Chart, 

Encounter, Health Probe, PAL/MED. 

Pearl, Practice Partner. QD Clinical, 

Smart-Med and SOAPware have the 
most complete general design features. 

Health care prevMar fimetionallty 

Features of pardcular merest to physicians 
as health care providers — recordb man- 
agement, case management and reporting 
futures — are displayed in "Health care 
provider features of 28 CPR systems." 
page 58. 

Records management. Eighteen 
products have complete results-reporcing 
features (allowing the physician or anoth- 
er provider to revieu' and eieccronicalK' 
sign reports, including notes for visits and 
telephone calls. labcMator^' dau, ancillaiy 
studies, consuiutions and hospiul dis- 
charge summaries), seven products have 
some of these features and three prod- 
ucts have none Fourteen can complete 
forms for insurance companies, repon 
physical examination results, work or 
school excuses, referral letters, patient 
summaries and test re p o rt letters. Twelve 
I products have some of these functions, 
j and tvvxi have none. Twentv’-six products 
allow electroruc transmission of records 
I to other sites, commonly by fax. 

I Individual case management. Thir- 
teen systems have comprehensive chan 
maintenance features that prompt users 
to update problem, allergy and medica- 
tion lists. Twelve systems have one or two 
i of these features, and three have none. 

Twentv-three systems maintain the rcc- 
j ord's problem onentatzon when problem 
i lists are modified. 

Twenn -five products provide at least 
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Uliile at least 
two prominent 
vendors did not 
participate in the 
surve>-, the results 
can be a starting 
place {Ktenoal 
purchasers. 


From the sur* 
ves-, PAijTkIED, 
Practice Partnw, 
Health Probe and 
SOAPuare stand 
out for both score 
and longevin-. 


► Fives\-stem$ 
with somewhat 
lower scores but 
numeroui instalia* 
ticms may be worth 
considering. 


: ► Similarly, four 
S products with high 
I scores but less 
I extensne track 
records bear 
tk-atching. 


some help in tracking and issuing remma- 
ers of need for preventive services. 
Twelve have complete fetttires, including 
default algonihms. the abiiit>' to modify 
algorithms by pracuce and patient, track- 
ing of patient refusals and issuing of 
reminders for health care providers. 
Twenn’ products have some disease-spe- 
cific reminder features, but only nine 
have complete feamres. 

Seventeen products allow tracking of 
health-related quality-of-Ufe or function- 
al-status measures, although no vendor 
indicated the use of a ^cific instrument. 
Twenty-three products allow graphical 
displays of data over time, and 17 have 
pedsatric growth charts. However, only 
seven products can display statistical 
process control chans, w'hich are impor- 
tant for identifying and following trends 
in clinical data tn individual pauents and 
for quality improvement projects. 

Remember that we’re 
ptesenting what vendors say 
about their own products. 

Only three vendors reported inter- 
faces with expert system sofnvare. but 1 6 
products provide access to practice guide- 
lines and other literature, either through 
an integrated web browser or another 
interface. 

Twent\'-si.\ systems have swne ortfcr- 
entn- capabilities. Fifteen can communi- 
cate with the unit responsible for the 
order, provide audit traib on orders and 
track the completion of orders. Thirteen 
have relatively complete test ordering 
functions, including at least four of the 
foDo\vmg; test inventories, costs, inairance 
coverage, local availabilit>‘, performance 
charactensucs and order sets. Elet'en sys- 
tems have relatively complete order-entry 
functions for therapeutic ser\ices, indud- 
ing at least four of the foDovsmg: invento- 
ries, cost, insurance coverage, local 
aN-ailability and order sets. Sixteen prod- 
ucts ha%'e relatively complete medication 
order-entry functions, incorporating at 
least SIX of the following: formularies 
costs, dosage calculations, allergy check- 
ing. adverse-reaction checking, drug-drug 
interaction checking, drug-disease interac- 


UOJl 

information. Eleven systems mamtam 
both consultant lists and insurance co%’er- 
age information; 10 offer one of these 
functions, and set'en have neither. 

Twenty-three products have com- 
plete noie-wntlng tools, including tem- 
plates. macros or pick lists, and the ability 
to insert pre-existing data into a note; all 
but one incorporate elecwonic signatures. 
However, only four systems have com- 
plete drawing tools, including image tem- 
plates and the ability to create genograms. 

Administrative and qualiij’ reports. 
Twenty-three systems can compile pauent 
profiles based on demographic data, dis- 
ease states and other variables. Twelve 
track measures of patient satisfaction, 
although no vendors mentioned specific 
instruments. Twenty products report on 
provider productivity (i.e., patient vol- 
ume), and 21 report prouder utilization 
of diagnostic tests, medications and con- 
sultations, Eighteen products routinely 
audit adherence to protocols for servi^ 
such as prevendve care and chronic dis- 
ease monitoring. Tw'cnty products can 
generate, pnnt or store ad hoc reports 
from queries on any data fields and export 
data from reports to other data manage- 
ment software. 

Overall. Autochart, Clinical Master, 
Compendia. Or, Chan, EiKounter, Health 
Probe. PAL/MED. Pearl. Sman-jMed and 
SOAPxv'aie have the most complete func- 
tionality for health care providers. 

PatiftHt functionality 

The functions of the CPR systems that 
are of particular ^ele^•ance to patients are 
presented in “Patient features of 28 CPR 
systems,' page 59. 

Appointment reminders. Twenty 
products can provide patient reminders 
for scheduled appointments. Eighteen 
can make appointments automatically 
based on a plan established at a prior 
visit, 15 can do so based on general prac- 
tice protocols and I T can cfo so based on 
needed preventive serv'ices. Twelve prod- 
ucts have all of these appointment re- 
minder functions. 

Access to informatton. Eleven prod- 
ucts allow pauents to access their CPRs 
in the practice. Six products allow access 
from both the practice and patients' 
homes. 
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Educattonal resources. Seventeen 
systems include the ability’ to print eduM- 
tionai ma^als on nsts, procedures, dis- 
eases and medications. Twelve have 
catalogs of other patient education mate- 
rials, and six offer inventories of patient 
support groups. Eight systems have inte- 
grated web browsers for access to Inter- 
net-based r^ourcK. 

Overal. Chnical Master. Pearl f^ctjce 
tener, Smart-Med and SOAPware ha\^ 
the most complete patient functionality. 

Ranking the systems 
For general design, one produa recci\-ed 
a two-star raring, 1 7 products a three-star 
raring and 10 products a four-sar raring 
{see "Composite raungs of 28 CPR sys- 
tems." page 51). No product received a 
five-star rating. For health care provider 
funcrionalicy', six products received a two- 
star raring, 12 a three-star rating, six a 
four-star rating and four a five-star rating. 
Scores in the patient funcrionaiity catego- 
ry were lower. &ght prcKlucts recei^■ed a 
one-star raring, nine a tw'o-star raring, six 
a three-star rating, four a four-star rating 
and one a five-star rating. The overall 
scores were two stars for nine products, 
three stars for 1 1 products and four surs 
for eight products. 

We hope that this updated survey, 
like our fint article, will give you practical 
guidance in seieaing a CPR system, in- 
deed, since this article presents informa- 
tion about twice as many systems, it 
should be considerably more useful. 

But be carefiil not to put more NNeight 
on our findings than they can bear. gi\'en 
the mherem kmitatiom of the survey for- 
mat- Remember that we re presenting 
what vendors say about their oun prod- 
ucts. With the resources available for the 
project, we couldn't test the systems sur- 
veyed. Also, 10 of the respondents to our 
earber survey didn t participate this time. 
Aithough some of these t’endors may no 
longer be in the CPR market, several, 
including MedicaLogic (800-322-5538), 
are still prominent. .Another prominent 
vendor. Epic Systems (608-2" 1-9000), 
didn't pamcipate in either sun'ey. 

For the most pan, this sun-ey should 
serx’e as a starting point for potential pur- 
chasers — one way to identity a fe%v CPR 
systems to explore tn greater depth. For 
an approach to choosing a CPR system. 


see our 1996 article and "Evaluating 
Software for Computer-Based Patient 
Records," Family Practice Management, 

September 1995, page 49. 

Based on these guidelines and consider- 
ing emfy the findings ^ this survey, we bebeve 
four CPR systems stand out from the 
others and warrant 

systems stand out 

p”be soA? irom the othm and warrant 
your closest scrutiny. 

on the market at 

least three years has more than 100 inf- 
lations and earned an overall score of four 
stars. PAITMED and Practice Partner 
recommended in our earlier survey; Health 
PrcA>e and SOAPware were mentioned as 
products worth considering. 

Five other products may also be par- 
ricularly worth considering, based on this 
survey s results: AuioChart. Computer- 
ized Patient Records, Compendia, Dr. 

Chart and QD Clinical. These products 
have overall scores of three stars and 
more than 100 instaJlarions each. 

Finally, we believe four other prod- 
ucts bear watching; Clinical Master, 

Encounter. Pearl and Smart-Med. They 
received overaD scores of four stars but 
are relatively new on the market or have 
relatively few installations. 

The marketplace for CPR systems is 
still maturing, but make no misuke: It's 
long past its infancy and has des'cloped a 
great deal in just the two years since our 
first $urs*ey. Among the systems now 
available are several that, properly im- 
plemented, could equip you better to 
manage your patients, learn from the out- 
comes of your care, adapt to developing 
clinical guidelines, improve your delivery 
of preventive care and control costs. 

Computers have re^'clutionized data stor- 
age by making data more portable, more 
easily accessible and easier to analyze. 

Frankly, your paper charts are obsoles- 
cent, and u s high time to think about 
what will replace them. ► 

Author liisciosure: Dr. Omsietu says tJuit 
he feoy received grants or research support 
hr projeas unrelated to this article from 
Pbysiaan Micro Systems, one of the vendors 
of CPR systems sun^'ed for this amcle. 
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• B Mwi or ill ot i>ie elemenu (T6 to 1 W pereentl 
»'b Some ot ihf elements (25 to ’5 percent) 

O m Few or none of the elements (0 to 2^ percent) 


Kev to coding svstems and data dicuonariet 

1 « iCD-y 

2-ICD-lD 

3 . ICPC 

4.UML5 

SbDRG 

6 « ICHPPC 

■-CFTJ 

8 « SN'OMED 

9 * .VDC 

10 b other 
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•Jilth care providet 
amiEs of 28 CPR 
seems 

/ 

/ 
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/ /!✓ ✓ ✓ ✓ / 

✓ 1 ✓ ' / ✓ / 
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• • 






/ ✓ 



• • • 


✓ 

✓ , ✓ ' ✓ ✓ 1 



/ J J 

✓ ✓ 

✓ ✓ ✓ / ✓ 

CewBHitimJ Petam RecarAi 

• * 
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✓ 

/ ✓ 

TWDoewtrpn 


/ \ V w \ 1 (✓i/- ✓! ✓ 



Domv ofC^MBl MvoMNn 

• 

/■i/iV'/; • 1 

✓ 
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✓ ✓ 
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✓ / 

✓ / / t 

EDS/ImbPncoc* 

•• 

✓ ✓ ✓ ✓ 


EacoHNv 


/ ✓ ✓ /,/l^ ✓ ✓ ✓ ✓ ✓ ✓! ✓ 


HoMiPcam 





• •• 



InBovr *<idiLa< Record 

•• 



■■ 1 1 — 1 
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✓ / / ✓✓✓•✓ ✓ ✓ 


PAL/MED 


/✓✓»'✓✓✓ ✓✓✓✓✓ ✓ 

✓ *' ✓ ✓ ✓ ✓ 

Padnuon 

*• 

✓ ✓ ✓' ✓ 

■■■i 

■ ✓ ✓ I 



✓ ✓✓ ^ ✓✓ ✓✓ ✓✓, / 

✓ ✓ 

✓ ✓ ; ✓ / ’ ✓ 1 

Wii'i Vli".. 


✓ ✓✓✓✓✓✓✓✓✓✓ ✓ 

✓ 

✓ ✓ ✓ ✓ ✓ 

OuOmoJ 1 

r«« 

/ ✓ ✓✓✓✓✓✓✓ 

✓ ✓ 

✓ ✓ ✓ ✓ ✓ : 

-S=i!S L 

r*«o 

✓ / 

✓ ✓ 

✓ ! ✓ ✓ i / 1 


S3^3 

✓ 

✓ ✓ 

✓ . ✓ , ✓ / , ✓ i 


•* 


✓ 

✓ ✓ / / / 

TMR-TV Methul R«t«rt , t 

" 

✓✓✓ ✓ 

✓ ✓ ✓ ✓ / ✓ / 



■ VuenioTu noi answrrra on Mrvr> returned 
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Dr. Addington. The college staff also is available to respond di- 
rectly by telephone to inquiries regarding this issue. At our April 
annual meeting, which was attended by 10,000 physicians, special 
Y2K educational sessions were repeatedly conducted by the col- 
lege’s Medical Informatics Department. A press conference was also 
held, and the Y2K Tool Kit was widely distributed. 

Nor are we finished with this campaign. The Y2K webpage con- 
tinues to be updated to reflect more recent information, the grow- 
ing number of physicians who have initiated corrective steps and 
the evolving nature of Y2K-related problems. 

We have not attempted to monitor the number of physicians who 
have evaluated or corrected their practice computer systems. That 
number changes constantly. Various government and other surveys 
indicate that a fairly high level of physician awareness now exists 
regarding Y2K and that most physician practices have undertaken 
some corrective measures. Time, however, is running out for those 
who have not, and the available options are rapidly declining. 

Later this week, we meet with all the Governors, which is our 
grassroots organization, and I will be stressing that their systems 
need to be tested. 

As the year-end deadline swiftly approaches, our attention is 
shifting to problems potentially faced by those practices that have 
undertaken corrective measures but not yet tested to be sure those 
measures will actually work. Nationwide Insurance, which proc- 
esses Medicare Part B claims for 7,500 physicians and other elec- 
tronic claims submitters, recently indicated that fewer than 10 per- 
cent of its clients had completed testing as of September 13th. Of 
those who had tested, 56 percent proved unsuccessful on the first 
try. Only 6 percent of those with critical date failures have been 
able to resolve the errors and complete the testing. They may or 
may not have to replace their supposedly Y2K compliant systems. 

The college is very concerned, therefore, that too many physi- 
cians may be relying on vendor certifications that the vendor’s soft- 
ware is Y2K compliant without requiring testing that all parts of 
the system are, in fact, compliant. While we think it risky for non- 
experts to try rolling forward the dates on computer systems to de- 
termine their Y2K readiness, it is imperative that even new sys- 
tems, as well as those supposedly corrected for Y2K, be tested by 
experts to confirm the operational success of the corrective meas- 
ures. Such requisite testing must include all individual software 
and hardware components of a system. 

In matters like electronic claims, problems can arise in the inter- 
face between two organizations’ supposedly Y2K corrected systems. 
Even when such problems are correctable, the first test may fail in 
a high percentage of cases, thus requiring some debugging of a 
physician’s system. Only a finite number of computer technicians 
are able to help with this debugging process. Therefore, we are con- 
cerned that delayed testing by medical practices might lead to a 
last minute debugging demand that could overwhelm available re- 
sources. 

We will be doing everything we can to make our members aware 
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of the need for testing and the importance of performing that test- 
ing now. 

I’ll be pleased to respond to your questions. Thank you. 

Mr. Horn. Thank you very much, Dr. Addington. 

[The prepared statement of Dr. Addington follows:] 
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Draft Testimony for Dr. Whitney Addington for the September 27, 1999 hearing on the 
Y2K Readiness of the Medicare program. 

Good afternoon. I’m Dr. Whitney Addington. I am an internist and pulmonologist in 
Chicago, Illinois and am president of the American College of Physicians — ^American 
Society of Internal Medicine. ACP— ASIM is the nation’s largest medical specialty 
organization. Many of the more than 1 15,000 members of the College are involved in 
internal medicine practices in which they constantly rely on computer technology which 
provides invaluable assistance in the provision of patient care as well as in the 
administrative aspects of running the medical practice. The subcommittees are to be 
commended for their ongoing focus on the serious challenges posed by Year 2000 (Y2K) 
readiness issues. 

ACP-ASIM was quick to recognize the threat posed by Y2K. Unless our members 
addressed it, we knew it could disrupt their practice operations and thereby impede 
delivery of vital health care services to their patients. As early as March, 1998 our 
monthly newsletter, the ACP-ASIM Observer, ran a full length article posing the question 
“is your practice prepared for the millennium bug? 

Early in 1999, ACP-ASIM mobilized a College-wide information campaign to alert, 
inform, and assist our membership in addressing the Y2K threat. Articles have appeared 
in most of this year’s issues of the Observer. The topic has been further publicized 
through our state Chapters. ACP-ASIM’s Center for a Competitive Advantage created a 
special Y2K web page on our web site, www.acpontine.com . and published a Y2K Tool Kit 
to give members detailed, practical information and guidance on how to address the 
issue. Staff also is available to respond directly by telephone to inquiries regarding this 
issue. At our April annual meeting, which was attended by 10,000 persons, special Y2K 
educational sessions were repeatedly conducted by ACP-ASIM’s Medical Informatics 
Department; a press conference was held; and the Y2K Tool Kit was widely distributed. 

Nor are we finished with this campaign. The Y2K web page continues to he updated to 
reflect more recent information, the growing number of p’nysicians who have initiated 
corrective steps, and the evolving nature of Y2K related problems. We have not 
attempted to monitor the number of physicians who have evaluated or corrected their 
practice computer systems. That number changes constantly. Various government and 
other surveys indicate that a fairly high level of physician awareness now exists regarding 
Y2K and that most physician practices have undertaken some corrective measures. Time 
is running out, however, for those who have not; and the available options are rapidly 
declining. 

As the year-end deadline swiftly approaches, our attention is shifting to the problems 
potentially faced by those practices that have undertaken corrective measures but not yet 
tested to be sure those measures will actually work. Nationwide Insurance, which 
processes Medicare Part B claims for 7500 physicians and other electronic claim 
submitters, recently indicated that less than 1 0% of its clients had completed testing as of 

September 13^. Of those who had tested, 56% proved unsuccessful on the first try. Only 
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60% of those with critical date failures have been able to resolve the errors and complete 
their testing. The remainder may have to replace their supposedly Y2K compliant 
sj^tems. 

ACP-ASIM is very concerned therefore that too many physicians may be relying on 
vendor certifications that the vendor’s software is Y2K compli^t, without requiring 
testing that ail parts of the system are in fact compliant. While we think it risky for non- 
experts to try rolling forward the dates on computer systems to determine their Y2K 
readiness, it is imperative that even new systems, as well as those supposedly corrected 
for Y2K, be tested by experts to confirm the operational success of the corrective 
measures. Such requisite testing must include alt individual software and hardware 
components of a "system." 

In matters like electronic claims, problems can arise in the interface between two 
organizations’ supposedly Y2K conected systems. Even when such problems are 
conectable, the first test may fail in a high percentage of cases, thus requiring some 
“debugging of a physician’s system. Only a finite number of computer technicians are 
available to help with this debugging process. Therefore we are concerned that delayed 
testing by medical practices might lead to a last minute "debugging" demand that could 
ovenvhelm available resources. 

We will be doing everything we can to make our members aware of the need for testing 
and the importance of performing that testing now! We appreciate the Committee’s 
interest in this vital matter and the opportunity to testify. Forums such as this one that 
call attention to the critical need for timely testing and other health care related Y2K 
readiness issues serv'e an essential public service. 

I would be pleased to respond to your questions. 

\\ASIM\DATA\Wp\GOVVRTRACHTM\Y2K Testimony.doc 



181 


Mr. Horn. Our next witness is Fred Brown, The vice chairman 
of BJC Health Systems, senior advisor on the President’s Council 
of Y2K Conversion. He’s also chairman of the Board of Trustees of 
the American Hospital Association. 

Thank you for coming. 

STATEMENT OF FRED BROWN, VICE CHAIRMAN, BJC HEALTH 

SYSTEMS, SENIOR ADVISOR, PRESIDENT’S COUNCIL OF Y2K 

CONVERSION, AND CHAIRMAN, BOARD OF TRUSTEES, AMER- 
ICAN HOSPITAL ASSOCIATION 

Mr. Brown. Thank you very much. Chairman Horn, Chair- 
woman Morelia and Congressman Turner. 

As we approach the Y2K period, January 1st, just 95 days away, 
the American Hospital Association and its members are continuing 
to be committed to ensure smooth delivery of high-quality health 
care, because the bottom line is patient safety and patient care. 

Hospitals of all kinds in every community across America have 
been diligently preparing all aspects of their operations for Y2K. 
The focus has been on medical devices and equipment, information 
systems and infrastructure, and there’s every indication as we have 
coordinated our activities through our State hospital associations 
and hospitals across the country that the hospital sector will be 
ready for Y2K, and our own survey information makes that clear. 

So does the report issued earlier this year by the HHS Inspector 
General’s office; and the Healthcare Year 2000 Readiness Assess- 
ment #2, conducted for HCFA, identified hospitals as the health 
care sector that is among the most aggressive in meeting the Y2K 
deadlines. 

And as hospitals continue to perform this inside preparation, we 
are also deeply involved in efforts to communicate with our commu- 
nities. We’re helping to support and be very active in the commu- 
nity conversations being conducted across the country, and we’ve 
encouraged every hospital in every part of this country to get in- 
volved with their communities in terms of communication. The hos- 
pitals are working with their local agencies, their police, fire, utili- 
ties and, most recently, there was a recent drill in California. 372 
hospitals took part. This drill was for the purpose of Statewide co- 
ordination of communications systems, the transmission of data 
about available hospital beds and the hospital’s own contingency 
plans for Y2K, and all of these test were completed successfully. 

These extensive preparations that the hospitals are undergoing 
cost money, and we expect to spend somewhere around $8 billion 
to become Y2K compliant, and this huge sum is made even more 
daunting because it comes on top of the Balanced Budget Act’s $71 
billion in Medicare hospital payment cuts. 

We commend HCFA for announcing that the fiscal year 2000 
PPS update would not have to be delayed while the agency’s com- 
puter systems are prepared for Y2K. HCFA has tackled this prob- 
lem in a way that will prevent nearly $300 million in payment up- 
dates from being held back from hospitals who badly need them. 

We do remain concerned, however, that HCFA has not disclosed 
its contingency plan to prevent a systematic failure in claims proc- 
essing as a result of Y2K, and it is imperative that HCFA establish 
a fail-safe contingency plan in case HCFA or its contractors’ pay- 
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ment mechanisms fail at the turn of the century. And such a plan 
also would provide payment to facilities which, for reasons beyond 
their control, are not able to follow routine procedures in getting 
claims to their fiscal intermediaries. 

A system of advance payments based on past payment levels is 
one way to prevent this from happening and would ensure that 
hospitals have the resources necessary to care for Medicare pa- 
tients, and we’d urge Congress to enact legislation, if needed, to au- 
thorize such a system. 

As hospitals, we are cooperating with HCFA as we have with the 
Food and Drug Administration; and as this issue of future date 
testing comes about, we are, through our communications with our 
State hospital associations and all of our hospitals across the coun- 
try, encouraging them to do the necessary testing to be assured 
that they are Y2K compliant. 

In conclusion, Mr. Chairman, Y2K will obviously affect every as- 
pect of America’s life. However, few, if any, are as important as 
health care, and American hospitals and their health systems, their 
State associations and the AHA are partners in the effort to pre- 
pare for Y2K, and we encourage Congress and the various agencies 
to continue working with us as well, and we pledge our cooperation 
during these last 95 days and in the future together to assure a 
smooth and healthy transition to the new millennium. 

Thank you very much for the opportunity to testify. 

Mr. Horn. Thank you very much. 

[The prepared statement of Mr. Brown follows:] 
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HOW HOSPITALS ARE PREPARING 

America’ s hospitals and health systems aie working very hard to prepare all aspects of their 
operations for the date change; devices and eqi.iipment, information systems, and infrastructure. 
For example, hospitals have been taking the following steps to ensure the safety and reliability of 
their services at the turn of the century: 

• Taking inventory of all equipment and devices and support systems - identifying which may 
be potentially affected by Y2K. 

• Determining which are actually affected and how their functioning will be altered - this is 
done through contact with the manufacturers and vendors to get the results of their 
assessments and testing. 

• Taking follow-up action if those devices or equipment are affected by Y2K - depending on 
the device or equipment, this may mean repairing, taking out of service, or training staff on 
how to use the equipment going into the new year. 

• Developing contingency plans - even with all the advance preparations, hospitals still need to 
anticipate the unforeseen. 

Information systems are another priority for America’s hospitals. At my health system.'fot 
example, Y2K has been the focus in the information systems department for more than two 
years. The first priority of all Y2K projects is, of course, any equipment that is directly related to 
patient care. We feel comfortable with our progress so far. We will continue working diligently 
throughout 1999 to ensure that the Year 2000 change occurs with minimal dismption in our 
facilities. Since the last half of 1 997, our information services department's primary focus has 
been Y2K. Dozens of individuals have been solely dedicated to examining computer codes, 
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programs and computer-assisted medical devices to ensure that they will work in the new 
millennium. 

Along with information services, BJC’s material services department is playing a critical role in 
our Y2K compliance. Materials services is primarily working with vendors and their related 
equipment, and with clinical engineering, which oversees all patient-related equipment in BJC's 
hospitals and facilities. 

PROGRESS ON Y2K COMPLIANCE 

As a result of this kind of diligent preparation, the majority of the nation’s hospitals expect to be 
completely "Y2K compliant” by Janirary 1 , 2000. Based on the results of a nationally 
representative survey we conducted, almost all of the remainder expect to be sufficiently 
prepared that critical operations will not be affected. At the time the survey was conducted last 
Spring, more than 95 percent of hospitals expected their devices, information systems, and 
infrastructure to be Y2K compliant by year end or expected no problems in their operations. 

In the survey, hospitals were asked whether their medical devices would be compliant, or 
noncompliant with no adverse effects. This is important, because some medical devices could 
technically be labeled non-compliant, even though they will operate - and do so safely - 
during and after the date change. 

For. example, an EKG machine may provide accurate heart rate information, while the strip 
recording the test information notes the date of the test incorrectly. In such cases, medical 
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pei^onnel would simply write the correct date onto the readout- In no way would this machine 
be a danger, but it technically would be labeled non-compliant because it did not recognize the 
date change. 

A similar report issued earlier this year by the Health and Human Services’ Office of Inspector 
General (OIG) also indicates high confidence in hospital Y2K readiness by the end of the year. 
The OIG report reaffirms what we’ve been hearing from our hospitals on their Y2K efforts. The 
fact that hospitals represented the largest percentage of responses to the OIG report shows their 
willii^ness to be forthcoming about their Y2K preparation. 

Our confidence in the accuracy of our polling methods is shared by the Medicare Payment 
Advisory Commission (MedPAC), the federal body that advises Congress on issues affecting the 
Medicare program. MedPAC relies on other AHA member surveys when the commission deals 
with Medicare payment issues. 

And the Healthcare Year 2000 Readiness Assessment #2, prepared for HCFA by the Rx2000 
Solutions institute and released in January, identified hospitals as the healthcare sector that is 
“among the most aggressive towards meeting its Year 2000 deadlines.” 

Taken together, all of these - the AHA survey, the OIG survey, and the Rx2000 survey - point 
toward the same conclusion: hospitals expect to be ready to meet the Y2K challenge. 



We were pleased that last week’s Senate Special Committee report - released 100 days before 
the date change - acknowledged the work hospitals are doing to prepare for Y2K. The 
committee noted that urban and suburban hospitals are “demonstrating a commitment to Y2K 
compliance,” and expressed confidence in their abilities to be ready for Y2K. While the 
committee expressed concern about the financial ability of rural and inner city hospiwis to meet 
the Y2K challenge, those hospitals are no different in their approach to Y2K than others. All 
hospitals - rural, inner city, urban, suburban - are zeroing in on systems directly related to 
patient care, because they know that the patient is what matters most Those efforts will continue 
during these last 1 00 days. 

THE COSTS OF COMPLIA>CE 

What are the costs of Y2K compliance expected to be? America’s hospitals and health systems 
expect to spend somewhere around $8 billion to become Y2K compliant. 

Smaller hospitals, those with fewer than 100 beds, will spend close to $1 billion on Y2K fixes, or 
an average of $435,000 each. Hospitals with between 100 and 300 beds will spend $2.5 billion, 
an average of $ 1 .2 million each. Hospitals with 300-500 beds will spend nearly $2 billion, or 
$3.4 million each. The largest amount of spending, $2.2 billion, will occur at hospitals that have 
more than 500 beds. 

Much of the $8 billion that hospitals expect to spend on Y2K compliance will be spent this year. 
This presents an immense challenge, because that spending comes on top of significantly 
declining Medicare reimbursement brought on by the Balanced Budget Act (BBA) of 1997. The 
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BBA reduced payments to hospitals by $71 billion over five years. Further reductions, like those 
proposed in the Administration’s recent budget proposal, would make a terrible burden even 
more onerous. 

We urge your support for two bills that would help ease this burden. In the House, Rep. Nita 
Lowey (D-NY) has introduced H.R. 2266, and a simitar bill, S. 1609, was introduced last week 
by Sen. Kay Bailey Hutchison (R-TX). This legislation, the American Hospital Preservation 
Act, would increase the inpatient PPS update levels by 0.5 percent for each of the next three, 
years to help hospitals cope with the BBA, and with Uie costs of preparing for the Y2K date 
change. This legislation is consistent with recommendations made by the Medicare Payment 
Advisory Commission earlier this year, when they assumed that hospital costs would increase by 
0,5 percent because of y2K. 

CONTINGENCY PLANNING 

America’s hospitals and health systems are in the business of dealing with the unexpected. They 
are used to mobilizing quickly in the face of floods, hurricanes and potentially disastrous events 
that are an unfortunate fact of life. There is no reason to believe that they will not also be ready 
for the 'fear 2000. 

Patient safety is the highest priority for hospitals and health systems. Our ultimate contingency 
■ plan is to take care of patients at the bedside - as we do 24 hours a day, seven days a week, 365 
days a year. Hospitals are examining a range of options, such as having extra staff available for 
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the date change and for the few days after, and not scheduling elective surgeries, thus ensuring 
that only people who absolutely need to be in the hospital are there. 

This is not being done out of a sense of panic, but to provide the broadest latitude for dealing 
with the unexpected. Some devices and equipment can only be operated in real-time - that is, 
after the clock turns from Dec. 31 to Jan. 1 - and hospital personnel will literally watch this 
equipment's clock change to ensure that it works properly before allowing it to be used for 
patient care. The ultimate contingency plan is to provide care the old-fashioned way in the 
unlikely case of a modem medical device impeding care. 

Some outside factors could also have an indirect effect on how our people deliver care. 
Specifically, it is incumbent upon hospitals to prepare now to respond to the potential loss or 
disruption of any essential hospital processes or services. They are directing their efforts both 
internally across hospitals’ facilities, and externally within communities. This includes working 
with such entities as utility companies, emergency medical services, and other health care 
providers. 

In addition, the AHA is working with the President’s Council on Year 2000 Conversion on the 
Year 2000 Information Coordination Center, which was created in June. Information available 
from the center can serve as an early warning system, enabling hospitals and other providers to 
manage their resources and responses better than if they try to handle things alone. 
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thousands of devices and pieces of equipment, the infonnation about whether these devices are 
Year 2000-compliant must come from the manufecturers. 

The AHA, the FDA and the manufacturers and their representatives have been collaborating to 
ensure that the Federal Year 2000 Biomedical Equipment Clearinghouse is receiving accurate 
and useful information. This information, easily available on the agency’s Web site at 
www.fda.gov, has been improved significantly. 

We appreciate FDA’s continuing efforts to closely monitor the reporting and availability of 
information. It is also important that the FDA play a proactive “rumor control” role, monitoring 
such arenas as the Internet and the media to make sure that information that circulates about the 
effects of Y2K on medical devices and equipment is accurate, and correcting it when it is wrong. 
Some of the more recent information available on the FDA Web site takes a good step toward 
helping distill what is being learned through the clearinghouse. 

THE SUPPLY CHAIN 

The AHA also is working with the President’s Council on Year 2000 Conversion, as well as with 
other associations and sectors of the health care field, to make sure the availability of drugs, 
pharmaceuticals and medical supplies will continue as needed into the new year. The exchange 
of information between hospitals and their suppliers, as well as joint contingency planning, are 
essential steps to avoid the hoarding or stockpiling that would lead to shortages. The AHA is 
focusing on a broad range of other suppliers to get the vendor information our members need, 
from medical device manufacturers to pharmaceutical and other medical supply companies. 
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Experts in the field are advising health care organizations to employ a risk management 
methodology to identify their most critical supply issues, focusing on those that are critical to 
patient health. Hospitals must know how their supplier and manufacturers plan to deal with 
potential disruptions to the flow of medical and surgical supplies, or the raw materials necessary 
to produce those supplies. 

Prudent contingency planning will require an exchange of information between suppliers and 
providers. In the absence of reliable information, hoarding and stockpiling may occur, creating 
the very supply chain disruptions that everyone should be working to avoid. 


THE ROLE OF CONGRESS 

As I have described, health care providers and the associations that represent them are devoting 
significant time, resources and energy to preventing potential Year 2000 problems from affecting 
patient safety. It is essential that we all look for ways to help prepare America’s health care 
system for the turn of the century, and Congress can play an important role. Your attention to 
this issue, through hearings such as this, reflects your understanding of the gravity of the 
situation. 

We ask you to help America’s health care system avoid Year 2000 problems by taking several 
other steps: 

• Congress should provide the FDA with any additional resources it needs to get needed 
information to the health care field, including serving a “rumor control” function regarding 


devices. 
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• Congress should insist that, if necessary, HCFA use its authority to make advance payments 
under Medicare. These payments, based on past payment levels, should be implemented to 
ensure adequate cash flow for providers in case carrier and fiscal intermediary payment 
systems fail, or other disruptions prevent hospitals fiom following the normal claims 
processing routines. 

• Support the Lowey/Hutchison legislation to increase inpatient PPS by 0.5 percent in FY2000. 

THE ROLE OF AHA AND OTHER ASSOCIATIONS 

Hospitals and health systems face the same kinds of concerns as other critical sectors of our 

nation. However, hospitals are unique. They have a special place in America’s social services 
safety net. Every cotmnunity in America relies on its local hospital to be ready to provide high- 
quality health care services on demand, 24 hours a day. It is therefore very important that the 
public understand that hospitals have been very aggressive in their efforts to ensure the seamless 
delivery of health care services before, during, and after the turn of the century. And it is 
important for hospitals to have a contingency plan in place. 

Protecting Public Confidence, Staying Abreast of Progress 

The AHA, in collaboration with our state, regional and metropolitan associations and other key 
strategic parmers, is working hard to stress to our member hospitals the importance of managing 
the Y2K issue from a public confidence perspective. We have developed tools to counsel 
hospitals and health systems about how to talk with the public about Y2IC and health cate. A 
Y2K Communications Action Kit was distributed to our members, who adapted the materials in 
the kits for use in their communities. 
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We are continuing our efforts to make sure that hospitals and health systems have the latest 
information on what their colleagues and other organizations are doing to address the Y2K 
problem. And we are helping them learn about potential solutions. 

Our State Issues Forum, which tracks state-level legislative and advocacy activities, is hosting 
biweekly conference calls dedicated entirely to the Year 2000 issue. On these calls, state 
hospital association and AHA staff share information. 

Articles are appearing regularly in AHA News, our national newspaper, and several other national 
publications published by various AHA membership societies. Several of these societies, such 
as the American Society for Healthcare Engineering, the American Society for Healthcare Risk 
Management, and the Association for Healthcare Resource and Materials Management, are 
helping their members attack the millennium bug in their hospitals. 

In addition, the AHA Web site has become an important clearinghouse of information on the 
Year 2000 issue, including links to other sites with information that can help our members. 

And most recently, we sent an AHA Y2K Advisory to every AHA member, also available on our 
Web site, detailing-how hospitals can put together a responsible course of action in the face of 
stockpiling concerns. In the advisory we advised hospitals that stockpiling and hoarding can 
cause the very shortages that they should be trying to avoid. 
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CONCLUSION 

Mr. Chairman, the Year 2000 issue will affect every aspect of American life, but few, if any, are 
as important as health care. America's hospitals and health systems, their state associations, and 
the AHA are partners in the effort to prepare for the Year 2000. We encourage Congress and our 
federal agencies to work vrith us as well. Together, we can eirsure a smooth - and healthy - 
transition into the new millennium. 
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Mr. Horn. Our next witness is Elizabeth Wilkey. She’s the elec- 
tronic data interchange coordinator for Blue Cross and Blue Shield 
of Georgia. 

Thank you for coming. 

STATEMENT OF ELIZABETH WILKEY, ELECTRONIC DATA 

INTERCHANGE COORDINATOR, BLUE CROSS AND BLUE 

SHIELD OF GEORGIA 

Ms. Wilkey. Thank you. 

Chairman Horn, Chairwoman Morelia, Congressman Turner and 
distinguished subcommittee members, thank you for the invitation 
and the opportunity to speak with you today on the Georgia Part 
A intermediary community outreach and testing progress for the 
millennium. 

For the past 18 months. I’ve been referred to in the State of 
Georgia as the Georgia blues Y2K evangelist. I’ve traveled through- 
out the State preaching a Y2K get ready sermon to vendors, clear- 
inghouses, providers, billing services, the Georgia Hospital Associa- 
tion, the Health Care Finance Administration, anybody and every- 
body that would listen to me. 

In Georgia, we have conducted seminars and conferences which 
include but are not limited to what you need to do to prepare insti- 
tutional providers, claims, products and systems for the millen- 
nium. I would like to extend a special thanks to HCFA Central for 
their participation, encouragement and support in our first Y2K 
vendor clearinghouse conference that was held in Atlanta, Georgia, 
on June 2nd, 1999. It sent a message to our vendors, clearing- 
houses and billings services, and that message was we need your 
help. Let us test this monster known as the millennium, Y2K, be- 
fore the year 2000, and that’s just what we’ve been doing. 

I want to thank the vendors and the clearinghouses and the bill- 
ing services and the providers for participating in testing and fu- 
ture date testing. As a result of our testing efforts, we were able 
to test with customers representing 98.25 percent of our vendor 
provider community, and we are now pursuing the remaining 1.75 
percent. 

There are certain advantages to this Y2K testing monster. If you 
would test and vendors get into the swing of testing with their pro- 
viders, it will eliminate the element of surprise. 

It allows contractors, vendors, clearinghouses, providers, billing 
services to test their hardware and software in a future-dated envi- 
ronment. 

It assures and shows assurance to the vendors and providers 
that they have the ability to submit electronic claims into the year 
2000. 

It gives the vendors and providers a comfort level of the contrac- 
tor’s ability to accept year 2000 claims. 

It gives the vendors and providers assurance that the contractors 
edits will work properly into the year 2000. 

It will create a proactive — not reactive, but proactive approach to 
resolving any issues before the millennium is here because you will 
have time to correct your systems before you go into the millen- 
nium. 
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It will enable the contractors and the vendors and the billing 
service to create a log of Y2K issues, and in that log not only would 
they have the issues but they would have the resolution to those 
issues, what should happen if, and how to resolve if we see this 
into the year 2000. 

It will aid providers in testing and contractors in meeting their 
Y2K certification efforts. 

Now, in our testing environment and testing for the year 2000, 
there were certain findings that we had great concern about. There 
were problems that we experienced with future-date testers, that 
most of them were very common errors that we see on a day-to- 
day basis. 

However, there was one that we had great concern with, and 
that’s where we uncovered that one of our vendors’ front-end sys- 
tem had a problem when it came to a windowing technique, and 
that windowing technique did not populate our electronic format 
properly to show month/month, day/day, century/century, year/year 
dates of service properly in those fields, but it really showed 99/99/ 
99 as the dates of service. Now, you’ve got to understand that this 
was one of those vendors that truly did not want to test with us, 
and the provider and I had to convince them and persuade them 
that they needed to do this testing. Today, that vendor is very 
happy that they did because now they can say I’m being proactive 
in resolving this Y2K issue before the year 2000. 

Now, I don’t know about other States but I can truly tell you that 
I believe the State of Georgia is ready for the millennium. We’re 
ready to proceed with our testing and getting those providers that 
have not tested tested; and, again, I thank you for the opportunity 
to share with you the Y2K testing experiences we’ve had in the 
State of Georgia. 

Mr. Horn. Thank you very much. I hear you’ve done a terrific 
job throughout Georgia. So thank you for coming and sharing some 
of those experiences with us. 

[The prepared statement of Ms. Wilkey follows:] 
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technique did not work. 

It created invalid date in the 20 record-4ates of service from and though dates populated and 
showed 99/99/99. Now this was a vendor that did not want to test and the provider and I had to 
persuade them to lest. Now that vendor is certainly glad they tested because now they can be 
proactive in resolving this problem prior to the millennium. 
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Mr. Horn. We now have our last witness, and it’s Mr. Baker. Mr. 
Baker heads the New York-hased Medicare Rights Center as their 
executive vice president. I’m curious, Mr. Baker, was that funded 
by Medicare or was it funded by a foundation? It’s a good idea. You 
don’t lack for customers. 

Mr. Baker. No. We certainly do not. You’re right. We’re funded 
in part by a grant from the Health Care Financing Administration 
that’s administered by the New York State Office for the Aging and 
then we fund-raise through foundations, through individuals and 
through others, but all of our services are provided free of charge 
to people on Medicare and their families. 

Mr. Horn. Now, is that limited to New York or is it regionwide? 

Mr. Baker. We do have a contract in New York State to take 
calls. However, we take calls from across the country on various 
toll-free hotlines. 

Mr. Horn. There is a toll-free line? 

Mr. Baker. Yes, there is. 

Mr. Horn. What is the number? 

Mr. Baker. 1-800. 

Mr. Horn. 1-800. 

Mr. Baker. 333. 

Mr. Horn. 333. 

Mr. Baker. 4114. 

Mr. Horn. 4114. The reason I ask is, there’s 435 members of the 
House whose caseworkers might like to call you. 

Mr. Baker. Yes. I hope they all don’t decide to call tomorrow. I’ll 
get in trouble. 

Mr. Horn. You’ve got 50,435, and if the Senate gets in on it, 
you’ve got another hundred. 

Well, thank you. Go right ahead. 

STATEMENT OF JOE BAKER, EXECUTIVE VICE PRESIDENT, 
MEDICARE RIGHTS CENTER 

Mr. Baker. Sure. Thank you for inviting me today. Chairman 
Horn, Chairwoman Morelia and Congressman Turner. I am the ex- 
ecutive vice president of the Medicare Rights Center. We’re a na- 
tional not-for-profit organization based in New York. We help sen- 
iors and people with disabilities and their families who are on 
Medicare through telephone counseling, through education efforts 
and through our public policy work. Last year, we fielded more 
than 50,000 calls, as you had mentioned, from people on Medicare 
and their families, and we handled or directly intervened in over 
10,000 of those cases. 

In February, we also testified with regard to the Y2K issue and 
Medicare, and today, 6 months later and 95 days to the millen- 
nium, we still have many of the same concerns. 

Our foremost concern is that the 40 million people on Medicare, 
seniors and people with disabilities, have access to ongoing health 
care services through the Medicare program. We note that the 
Medicare and year 2000 booklet that was put out by HCFA just re- 
cently in its mailing to all 40 million Medicare beneficiaries does 
have information on Y2K. We understand that they will not, and 
they are told in that booklet, that they will be not be responsible 
for health care costs that may be caused by Y2K computer glitches. 
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However, there’s no mention of how this advice might help them 
if they cannot get that care in the first place, and that’s our major 
concern. 

They’re given a phone number, 1-800-MEDICARE, to call if they 
have trouble regarding Y2K issues. I note that, right now, with 1- 
800-MEDICARE and the Medicare Plus Choice program, fre- 
quently our organization is receiving inappropriate referrals and a 
lot of referrals from that particular number. So I question the abil- 
ity of 1-800-MEDICARE counselors to handle these calls, and if 
they do refer them on to our organization, whether or not we have 
the resources or the training, frankly, with Y2K to handle those 
kinds of issues. 

We’re particularly concerned about the Medicare managed care 
program, or the Medicare HMOs. Unlike original Medicare, Medi- 
care HMOs, as you know, require preauthorization for specialty 
care or other types of care, and we’re most concerned about those 
6 million beneficiaries who are enrolled in Medicare HMOs. Unless 
Medicare HMOs are Y2K compliant, and we heard earlier that 
many are not, we could see a significant increase in the number 
of people on Medicare who, because of system failures, can’t get au- 
thorization for the care they need with potentially devastating con- 
sequences. 

To consider a potential scenario, in February 2000, a woman on 
Medicare and in a Medicare HMO goes to the hospital with stom- 
ach pains. The doctor calls the HMO requesting approval to per- 
form a Medicare covered procedure to alleviate that pain. The 
HMO does not have the systems in place to find the patient’s name 
on its data base or can’t use its system to determine whether the 
service is covered and, therefore, may not or does not authorize 
care. As a result, this particular individual would not get the care 
that she needed and which was Medicare — and which is Medicare 
covered. 

We’re also concerned about what kind of tools HCFA is going to 
use to hold Medicare HMOs accountable and to make sure that 
people on Medicare get the care they need. As we know, HCFA has 
asked all of its contractors to submit Y2K compliance forms, but, 
as you know, these statements are not admissible in a court of law, 
and in the past HCFA has lacked the staff and resources to prop- 
erly oversee its contracting agents. The Y2K issue highlights the 
Federal Government’s and HCFA’s, in this case, limited ability to 
ensure that people on Medicare get the health care they need from 
the private health plans that contract with HCFA. 

Second, we’re also concerned about those programs that pri- 
marily help people with low incomes on Medicare, and these are 
the QMB, SLMB, QIl and QI2 programs. We are already seeing a 
lot of access problems in those programs and particularly with re- 
gard to the interaction of State and Federal computer systems be- 
cause these are programs that are administered by the States. The 
application process is already very slow and difficult, and so we feel 
that system failures may even further deny access to these impor- 
tant programs for people who are most vulnerable in the Medicare 
population. 

Finally, I don’t — in the Medicare population, we see a lot of ques- 
tions from seniors on our hotline about prescription drugs and med- 
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ical equipment, and I don’t know and I don’t think that there has 
been the appropriate kind of outreach to them about how they 
should handle the prescription drug and medical equipment issues 
that might come up because of Y2K. I know this may be outside 
of HCFA’s purview to a certain degree, but we do think that, as 
the major financer of health care in this country and particularly, 
of course, with the Medicare program, that HCFA should be taking 
some proactive steps to give consumers tips or other information 
about how to deal with prescription drugs or medical equipment 
contingencies or issues that may arise because of Y2K. 

As you know, people on Medicare have already lived through 
many changes and hardships. Most do not own a computer. They’re 
probably not overconcerned with the ability of computer systems to 
transition smoothly into the year 2000. We don’t want to instill 
fear in them, but it’s our job as professionals who work closely with 
them to educate our clients on how they can get the care they need 
and when they need it. We are telling our clients to ask their doc- 
tors, pharmacists and medical suppliers if they are Y2K. We hope 
that Congress and HCFA will do whatever possible to make sure 
that people on Medicare keep getting the care they need in the new 
millennium. 

Thank you very much. 

Mr. Horn. We thank you. That’s a very helpful statement. 

[The prepared statement of Mr. Baker follows:] 
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Statement of Joseph R. Baker III, Esq. 
Executive Vice President, Medicare Rights Center 


My name is Joe Baker. I am the Executive Vice President of the Medicare 
Rights Center, a national not-for-profit organization based in New York City. MRC 
helps seniors and people with disabilities on Medicare through telephone counseling, 
public education, and public policy work. MRC, under a contract with the New York 
State Office for the Aging, with funding from the Health Care Financing 
Administration, operates a telephone hotline. Last year, we fielded more than 50,000 
hotline calls from people with Medicare questions and problems and provided direct 
assistance on a variety of Medicare issues to more than 10,000 callers. I thank the 
Subcommittee on Government Management, Information and Technology, and the 
Subcommittee on Technology for this opportunity to testify on how the transition to 
the year 2000 may affect people on Medicare. In February of this year, we testified 
before the House of Representatives Committee on Ways and Means about our 
concerns that people on Medicare would not get the care they need if the transition 
does not run smoothly. Today, six months later and only 95 days from January 1, 
2000, we still have many of the same concerns. 

We recognize that the United States government and corporate America are 
taking Y2K issues seriously, and we hope their efforts will result In a smooth 
transition to the year 2000 for everyone on Medicare. Otherwise, people on Medicare 
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could face serious health care access problems. Today, I am going to talk about some 
access to care problems that could arise. 

First, at the federal level, our foremost concern is health care access for the 
more than 40 million seniors and people with disabilities in Medicare. We applaud 
HCFA’s efforts to ensure that its own systems are Y2K-compliant. And we 
appreciate that HCFA has made an effort to educate providers about Y2K. 

We are glad that the Medicare & You 2000 handbook informs people on 
Medicare that they will not be responsible for health care costs caused by Y2K 
computer errors, but how will this advice help if they cannot get the care they need in 
the first place? We are concerned that the 1-800-MEDICARE number will not be 
able to handle a lot of calls and will not be able to provide needed assistance. If they 
simply refer cases to the SHIPs as they do with most problems, we are concerned that 
the SHIPS have not been given the resources to handle these additional cases. 

However, because Medicare HMOs, unlike Original Medicare, require pre- 
authorization for specialty care, we are most concerned about access issues for the 6 
million people who are enrolled in Medicare HMOs. HCFA cannot guarantee that 
Medicare HMOs will be Y2K-compliant. Unless the Medicare HMOs are Y2K- 
compliant, we could see a significant increase in the number of people on Medicare 
who, because of system failures, can’t get authorization for the care they need, with 
potentially devastating consequences. 

Consider this potential scenario: it is Februaiy 2000 and a Medicare HMO 
enrollee goes to the hospital with stomach pains. The doctor calls the HMO 
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requesting approval to perform a Medicare-covered procedure to alleviate her pain. 
The HMO does not have the systems in place to find the patient’s name on its 
database or can’t use the computer to determine whether the service is covered and 
therefore does not authorize the care. As a result, the woman does not get the care she 
needs. 

We are concerned about how HCFA protects people in Medicare HMOs when 
they cannot get care because of Y2K system feilures, and how it holds these HMOs 
accountable. What tools does HCFA have at its disposal to ensure that HMOs provide 
people on Medicare with the care they need? 

HCFA has taken a strong first step in requiring all of its contractors to submit 
Y2K compliance forms. But, as you know, these statements are not admissible in a 
court of law. And in the past HCFA has lacked the staff and resources to properly 
oversee its contracting agents.' The Y2K issue highlights the federal government’s 
limited ability to ensure that people on Medicare get die health care they need from 
the private health plans that contract with HCFA. 

Second, at the state level, we are concerned that system failures caused by 
inadequate preparation for Y2K on the part of local Medicaid and Social Security 
offices will slow down or undermine the application process for QMB, SLMB, QI- 1 
and QI-2. These programs help many low-income people on Medicare pay for their 
health care coverage. The application process is already slow and difficult in many 
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states, and system failures could prevent even more people from getting these benefits 
and the care and coverage they need and are due. HCFA should institute a system to 
ensure that the Social Security Administration does not drop dually-eligible people 
from Medicare because of Y2K system failures at state Medicaid offices. 

Finally, at the individual level, it is critical that those seniors and people with 
disabilities on Medicare who rely on prescription drugs and computer-chip driven 
medical equipment keep getting the medicine and equipment they need without 
interruption when the year 2000 begins. Although overseeing this continuity of care 
is outside of HCFA’s legal jurisdiction, HCFA has an important role in educating 
people on Medicare on what they need to do to ensure that the transition to Y2K goes 
smoothly for them. We believe that HCFA should sponsor a series of public service 
announcements telling people on Medicare, their friends, and family members that: 
one - they need to check with their doctors and pharmacy to ensure availability of 
their prescriptions during the transition to the year 2000, and two - if they use a 
medical device, then they should check with their doctor or supplier in advance to 
make sure that the equipment is Y2K-compliant. 

People on Medicare have already lived through many changes and hardships. 
Most do not own a computer. They are probably not overiy concerned with the ability 
of computer systems to transition smoothly into the year 2000. We do not want to 
instill fear in people on Medicare. It is our job, as professionals who work closely 

' An Office of Inspector General report finds that HCFA has neither the staff nor resources to oversee 
Medicare HMOs. Department ofHedthaRdHiananSa^!ces,OfficeofhispcctorGen«ai, April 199S, 
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with seniors and people with disabilities on Medicare, to educate our clients on how to 
get the care they need when they need it. We are telling our clients to ask their 
doctors, pharmacists, and medical suppliers if they are Y2K-compliant. We hope that 
Congress and HCFA will do whatever possible to make sure that people on Medicare 
keep getting the care they need in the new millenium. Thank you. 


Report Numbers; OEM 1-96-00 1 90 and OEMl -96-00 191. 
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Mr. Horn. We’re now going to go to questions, and we’re going 
to treat ourselves the way we treated you. Each person will have 
questions for 5 minutes. We’ll have another round. And I’m going 
to start with yielding my 5 minutes to the co-chairwoman, Mrs. 
Morelia of Maryland, and then we’ll have it to Mr. Turner for 5 
minutes, and if they haven’t covered it all, I will take 5 minutes. 
So that’s the way it will work. 

Mrs. Morella. Thank you, Mr. Chairman. You’re very fair about 
that. 

And I must commend the panelists. You all stayed within the 
time limit. You all presented your statements very succinctly, and 
I applaud that. 

My question will he basically to GAO and HCFA to begin with. 
The 425 managed care organizations serving 6.9 million Medicare 
beneficiaries of the 39 million Medicare beneficiaries were never 
deemed mission-critical by HCFA, and the latest HCFA reports 
show that few of these managed care organizations are Y2K com- 
pliant. My question is, why weren’t the managed care organizations 
deemed mission-critical if they’re serving 6.9 million Medicare 
beneficiaries? In other words, why are they deemed different from 
the fee-for-service contractors? 

Dr. Christoph. That’s a complex question. Congresswoman 
Morella. 

The managed care organizations are different from the Medicare 
contractors in that the managed care organizations contract to pro- 
vide a service. They contract to provide care. The Medicare contrac- 
tors are contracted to provide processing of claims. What we have 
asked the managed care organizations to certify to is not only that 
they will make their systems ready by January 1st, 2000, but that 
they continue to provide operations and continue to provide care to 
the beneficiaries enrolled. In a sense, it doesn’t matter what sys- 
tems they’re using to back up their operations. What they have 
contracted to do is to have providers provide care, and that’s fun- 
damentally different from how the Medicare claims processing con- 
tractors operate. 

Mrs. Morella. You also changed your mind, too. I mean, at one 
point weren’t they going to have to report, you know, later on in 
1999 and then you rescinded it? 

Dr. Christoph. I am sorry, can you repeat the question? 

Mrs. Morella. Yes. My understanding is that HCFA originally 
requested that the managed care organizations recertify in 1999 
and then later rescinded that. 

Dr. Christoph. No, we have not rescinded it. We have — ^because 
events overtook that original statement that we were going to have 
them recertify, we subsequently decided we needed to watch them 
more carefully. So we demanded of them their contingency plans. 
We, subsequent to that original determination, have gone out and 
visited the plans that we thought had the highest impact. So we 
were rethinking whether or not recertification was necessary. 
They’d already certified, they’d already testified that they would be 
operational come January 1st. However, we just revisited that and, 
in fact, today have — are issuing the letter requiring that recertifi- 
cation statement of the managed care organizations. 

Mrs. Morella. You just did it today? 
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Dr. Christoph. Yes, ma’am. 

Mrs. Morella. Great timing. That’s great. 

Mr. Willemssen, would you comment on that? 

Mr. Willemssen. Yes, couple of points. We’re very encouraged to 
hear that HCFA has decided to go out with that certification state- 
ment on managed care organizations. We think that that can go a 
long way toward giving further assurance that these organizations 
are indeed ready. I think before any organization wants to submit 
a certification they will want some extent of evidence internally 
that they are ready. So I think that’s a step in the right direction, 
and this is the first we’ve heard of it, so I’m very glad to hear that. 

In terms of your prior question on why the systems supporting 
MCOs were not mission-critical, in retrospect there should have 
been some, in my opinion, designation of mission-criticality. Prob- 
ably not identifying 425 or 383 systems but — and it’s easy to sit 
here now and say that, in retrospect having some designation in 
the quarterly reports that these also are fairly important organiza- 
tions serving almost 7 million beneficiaries. I think now that the 
level of attention has been brought to bear on managed care orga- 
nizations that that will assist in making sure that whatever can be 
done in the next few months is done. 

Mrs. Morella. Very good. I guess looking at the lights I have 
a little more time, and maybe I’ll try to also get into the ACP- 
AISM question with HCFA, also. 

Based on data that was presented I understand last week at 
HCFA’s Y2K electronics submission summit, 60 percent of the part 
B providers, which is equivalent to about 500,000 physicians, are 
not prepared to submit Y2K compliant electronic submissions. 
What actions is HCFA taking to remedy that situation, and, you 
know, what recourse might they have? 

And I am going to ask you if you would comment on that also. 
Dr. Addington. 

Dr. Christoph. I think you’ve made a very important point 
there. Congresswoman. 

We have endeavored in all of our outreach to encourage providers 
to get ready, and we have told all of our contractors that they must 
be ready and able to test with submitters. The response has been 
very disappointing. As we testified, the difficulty is, in all of our 
outreach, as GAO has noted, we aren’t reaching all of the pro- 
viders. The ones that show up to our conferences, to our presen- 
tations are probably the ones who are most aware and most wor- 
ried. It’s the others that — who aren’t getting our message — that 
concern us. 

We’ve been trying to be more focused. Last week, in Washington, 
we had a conference with organizations that submit claims and 
clearinghouses, and we discussed with them ways to encourage 
more testing with us. Our goal was to make available to providers 
as many resources as we can so they could test, but while bringing 
the horse to water, we haven’t succeeded in making them drink 
yet. So that’s where we’re trying to focus our outreach efforts, is 
convincing them to make use of what we’ve been able to provide 
to help them. 

Mr. Horn. Thank you very much, and we now yield 5 minutes 
to the gentleman from Texas, Mr. Turner. 
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Mrs. Morella. Mr. Chairman, Dr. Addington can later fill in on 
that, please? 

Mr. Horn. Sure. 

Mrs. Morella. Find out what he’s going to do to whip these phy- 
sicians into shape. 

Mr. Turner. Thank you, Mr. Chairman. 

It seems to me our discussion on Y2K compliance by managed 
care organizations probably gives us an opportunity to shed a little 
light on the relationship between the government and managed 
care and the beneficiaries, and I might ask Mr. Baker, first, to 
comment on this. 

I was noticing in your statement you made the comment that 
HCFA cannot guarantee that Medicare HMOs will be Y2K compli- 
ant, and a few paragraphs later you asked the question, what tools 
does HCFA have at its disposal to ensure that HMOs provide peo- 
ple on Medicare with the care they need? I’d like for you to perhaps 
comment a little bit on that, and maybe Mr. Christoph can add a 
perspective from the agency point of view. I am not sure what con- 
trol HCFA has over these managed care organizations, and we’re 
talking about the GAO’s request that they demand a certification 
after the agency seems to be somewhat reluctant to do so. 

Now they announce they’re going to require it again. I am not 
even sure what legal rights HCFA has to demand such from these 
managed care organizations. Is there something inherent here with 
regard to the relationship between HCFA and managed care orga- 
nizations that makes it a little difficult to secure compliance in the 
Y2K area or in other areas relating to care? 

Mr. Baker. Well, I think that there has been issues, as I think 
all of us are aware through GAO reports and others, around 
HCFA’s ability to oversee the Medicare managed care program and 
to make sure that Medicare HMOs are providing the care to people 
on Medicare that they deserve and are eligible for under the pro- 
gram. 

As I said in my testimony, I think the Y2K issue highlights the 
inability in many instances of HCFA to appropriately oversee the 
managed care organizations. I think that HCFA has made great 
strides in recent months and in recent years in oversight of the 
managed care organizations, but I think, you know, in our hotline, 
time and time again, and while this information is anecdotal, I 
think it’s still that we can see these trends arise where managed 
care organizations and Medicare HMOs just don’t seem to know or 
are literally, you know, unconsciously not following Medicare cov- 
erage guidelines but instead putting their own coverage guidelines 
or their own ideas about what Medicare should and should not 
cover into the mix, whereas that really isn’t appropriate or allowed 
under Medicare regulations. 

There is a real flaunting of the rules in many instances, and in 
other instances just an ignorance of the rules, which is just as bad 
when it means that people are not getting the care that they are 
entitled to and need. 

Mr. Turner. Dr. Christoph, do you see the managed care and 
Medicare HMO organizations flaunting the rules, as Mr. Baker is 
referring to? 
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Dr. Christoph. That sounds more like a policy issue, and I am 
not prepared to talk about how the rules are enforced. I don’t per- 
sonally see that. I am preoccupied with the systems kind of issues. 

Mr. Turner. What is your legal authority specifically to the Y2K 
compliance issue to tell a managed care organization or a Medicare 
HMO that you have to give us a certification statement of Y2K 
compliance? Do you have that authority? 

Dr. Christoph. We have very few levers to exert on the managed 
care organizations. We have required that they submit documents. 
We don’t have much legal authority about how a private business 
that is contracted with us carries out that business. So other than 
getting them to certify that their systems will work or that they 
will deliver a quality of service, we have relatively few rules or le- 
vers to exert on them. 

Mr. Turner. Mr. Willemssen, do you believe that we need great- 
er legal authority to require managed care organizations to certify 
or maybe in other areas other than Y2K certification? 

Mr. Willemssen. I think, with the limited time remaining, an 
approach that has worked in other sectors is, whether the legal au- 
thority is there or not, HCFA can request the information and then 
publicize the results by organization and say we asked 383 MCOs 
for certification information and here is what we got back by orga- 
nization. If certain MCOs don’t want to provide the information, 
that fact can also be published. 

My concern is that, in the limited amount of time available, I 
don’t know that a full accounting of the legal intricacies can be 
done, and we may have to take more of the approach which has 
been done in the biomedical device area where the publicity of indi- 
vidual organizations and what they have reported ended up dra- 
matically increasing the response rate. 

Mr. Turner. Has Y2K compliance been a factor in any of the 52 
HMOs that have dropped out of providing Medicare managed care? 

Dr. Christoph. I am not aware of why they chose not to stay in 
the program. It possibly is, but I can’t answer that with certainty. 

Mr. Turner. Mr. Baker, it seems to me that it is difficult to 
know whether HCFA can ensure that HMOs are providing Medi- 
care beneficiaries with the care that they are entitled to. 

I think I have always held the view that we inadequately reim- 
burse our providers now under the Medicare program. Many of our 
rural hospitals that I represent are having difficulty keeping the 
doors open, and yet somehow we think that a managed care com- 
pany can provide that same care cheaper and make a profit while 
they are doing it. It seems like a difficult thing, but I guess you 
would concur that we do need to have some tightening up in terms 
of the control that HCFA has over managed care organizations? 

Mr. Baker. That is right. I think we need more control and over- 
sight. At this stage of the game, we need more information to go 
out directly to consumers about what they can do, what are — for 
lack of a better term — advocacy steps or survival skills. I don’t 
know what kind of social marketing campaign we want to use but 
something that will give them some information about how to deal 
with this crisis if it becomes a crisis and how to get the care that 
they need should they keep hearing no. What organization will be 
there for them should they need care and can’t get it. I think we 
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need to give some of those answers so they can start preparing for 
it. Not scare them with that information but at least start to train 
them about how they might have to meet this situation. 

Mr. Turner. Thank you. 

Mr. Horn. We will have another round on this. 

I yield myself 5 minutes, but first Chairman Morelia wanted I 
think Dr. Addington’s answer to the question that was asked of Mr. 
Christoph, so let’s get it on the record. 

Dr. Addington. Thank you. Congressman. 

First, let me say that, responding to Chairwoman Morelia’s sug- 
gestion to whip them into shape, I am reminded of the old saw that 
“whipping physicians into shape” is sort of like herding cats. 

I would like to think that our members whose systems have not 
been tested will respond. Many of our members are part of huge 
organizations. I would say 50 percent of our 115,000 physician 
members are part of large organizations that have considerable ex- 
pertise. I personally am a faculty member of such an institution, 
and we have been thoroughly checked and tested. 

It is the 50 percent that do not have the expertise in-house. In 
a two- or three-physician practice, clearly the person who sends out 
the bills is probably the most sophisticated member of the office. 
Nonetheless, we are confident that we will get our college approach 
to this and insist that every member avail themselves of our Tool 
Kit and of our capacity and expertise in identifying for them those 
individuals in their community that should be contacted to actually 
do the testing. 

So I think the prognosis is excellent for internists. I think there 
will be some problems, but I trust that those will be straightened 
out rapidly. 

Mr. Horn. Well, thank you for that very full answer and opti- 
mistic answer. 

The first time I ever heard the expression you used, herding cats, 
was my first year here in 1993; and my wife, looking up in the gal- 
lery, concluded after one evening of voting was that the Members 
of the House of Representatives are like herding cats. You are look- 
ing at a tenured professor, and they act more like herding cats 
than anybody. Nobody can touch them. 

Dr. Addington. Well, we are in good company then. 

Mr. Horn. You are in very good company. The cats might get 
upset if they are listening here. 

On the recertification testing, HCFA, their mission-critical sys- 
tems, are their systems now compliant, the internal ones? 

Dr. Christoph. We went through a thorough round of testing 
and certification last year. All of our internal systems, including 
the systems that send money to managed care organizations, were 
certified as compliant by December 31st last year. 

We made changes to those systems. Any computer system 
evolves. We have had to incorporate some changes because of con- 
gressional mandates and maintenance. GAO has recommended 
that we freeze those systems and make sure that any changes that 
have been made haven’t influenced their Y2K certification. 

A lot of folks in industry will only test the changes that they 
have made. What we have done is to put a program in place during 
this freeze period of retesting everything. We are putting them 
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through all of the rigor and the tests that we did before, including 
future day testing. That round of testing should be done in Novem- 
ber. 

So I guess the short answer is, I believe our systems are ready, 
but we are going after double assurance, and that is why we are 
doing such an intensive retesting, recertification, plus the addition 
of quality assurance tools like Mr. Willemssen mentioned. 

Mr. Horn. The recertification done by outside verifiers, how have 
you handled that? 

Dr. Christoph. The testing itself is done by internal staff and 
contractors that are basically providing staff support, but we have 
an IV&V contractor that is looking over our shoulder every step of 
the way, validating our procedures and looking at the test results 
and, in fact, signing off on the certification statements. So we are 
having independent evaluation to keep us honest. 

Mr. Horn. When you went through this testing and the certifi- 
cation, what was the magnitude of Y2K errors? Did it seem to be 
a very important thing where you had more than one aspect of it 
and you might have had 10 times that it would cause mischief? 
What did you get out of that testing and recertification? 

Dr. Christoph. Well, the original round revealed that we did 
have some issues, and that is the whole point of testing, is to show 
you what works and what doesn’t. Yes, we found issues, and we 
fixed them. I don’t think that we had any more Y2K bugs than are 
common in codes of this magnitude. Some of our systems are over 
a million lines of code on the internal side. 

After renovation, we have been using quality assurance tools, 
and we find in looking at them that the things that were missed 
were the things that these tools point up. Actually, far fewer than 
what I read in the trade press about the frequency of errors in ren- 
ovated code. 

Mr. Horn. Mrs. Wilkey, I commend you for your hard work to 
assure that Blue Cross Blue Shield of Georgia is year 2000 ready. 
What have been the critical success factors for you? 

Ms. Wilkey. I think the critical success factors would be getting 
out in the vendor world and getting their attention, first of all. 
That was a big chore for us. 

Providers have a tendency to leave things when it comes to their 
billing up to vendors, and you have to work very closely with the 
vendors and the clearinghouses in order to get the providers to do 
what you need them to do. 

The 98 percent test factor that we have now we feel good about. 
We have gone through DDE tests, direct data entry system testing. 
We have gone through electronic remits. We have come through 
electronic funds transfer, and it is good. If we can get the remain- 
ing 1.75 percent going 

Mr. Horn. What do you see as your biggest remaining problems 
and concerns? After all of this outreach that you have had, what 
worries you the most, if anything? 

Ms. Wilkey. That 1.75 percent that has not tested, that I have 
to knock on their door and do surveys and say why are you not 
testing? Are you going to pay the providers if you cannot send me 
a claim? That worries me. 
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Mr. Horn. It sounds like you are keeping after them, and that 
is the only way that it is going to get done. 

I now yield 5 minutes to my colleague from Texas, Mr. Turner. 

Mr. Turner. I don’t have any other questions. 

Mr. Horn. Mr. Brown, there has heen some question that the 
biomedical equipment could fall victim to year 2000 failures. What 
equipment is still at risk due to your year 2000 problems? 

Mr. Brown. I think in the scheme of things. Chairman Horn, 
medical devices and equipment was really the first priority, along 
with the information systems and infrastructure, and I think hos- 
pitals are working with the FDA and working with our vendors 
and doing the testing. And I know in my own organization, which 
consists of 14 hospitals in metropolitan St. Louis and medical cen- 
ters in urban and suburban areas, we went through an extensive 
testing program. 

As I have traveled the country and talked to different hospitals 
and as we have had the dialog, the equipment piece of it is No. 1. 
We have worked very closely with the vendors. We have done the 
testing and worked with FDA. We changed a lot of equipment. 

The other thing is to be assured that equipment has overrides on 
it, and that we have adequate staffing to be able to make that tran- 
sition. So I feel that the hospitals — in working with HCFA and the 
FDA and others on equipment issues — that we really have done a 
significant job in terms of working on a cooperative basis to be sure 
that the equipment will be functional and that there is adequate 
staffing to support that equipment come January 1st and during 
the transition. 

Mr. Horn. When we were in Cleveland about a year ago we had 
testimony from the representative of the Cleveland clinic as to how 
they were going about looking at the various pieces of equipment 
to make sure that they are year 2000 compliant. Apparently, there 
was and maybe still is a website nationally where hospitals can 
plug into that by getting into the web and you can describe the 
name for the piece of equipment, what the model number is. We 
were worried about the chips, that a lot of people don’t even know 
where they are in the equipment. What is going on on that? 

Mr. Brown. A couple of things. We have been working closely 
with HHS, with the FDA, with HCFA. We have worked with the 
vendors. There are websites that the FDA has put up. We have our 
own websites on which we can convey information to our members 
across the country. We have set up communication devices between 
the American Hospital Association and each of our 50 State asso- 
ciations working with their members. So we are continually 
dialoguing and making available to them information where they 
can access the websites. 

Mr. Horn. For the manufacturers of some of the equipment 
years before we ever knew there was a problem here, have you 
found that they have been cooperative? 

Mr. Brown. Over the last 6 to 9 months they have been. We 
have had several manufacturers who through our publications and 
periodicals, through communications indicated that they are Y2K 
ready. So we found good cooperation. 

Mr. Horn. One of the things that we have looked at in about 10 
different field hearings is the backup power. This is particularly 
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true of hospitals. What is the estimate of what a minimum is that 
a hospital should have in order to have generators that are run on 
diesel or whatever it is? 

Mr. Brown. You should have the ability to run for a period of 
time and have access to additional fuel, and I think hospitals really 
have focused over the years on disaster recovery. And I think as 
we have gone through the issues with the hurricanes and the nat- 
ural disasters, the flood in Missouri in 1993, hospitals have been 
working with their fuel suppliers and utilities in terms of backup. 

You have contingency plans with other institutions in your metro 
area. In St. Louis, for example, we have 35 different hospitals that 
communicate with each other in terms of availability of beds and 
ability to transfer in emergencies. So this is routine for disaster 
planning. 

Mr. Horn. How many days do they need to get through a black- 
out or brownout? 

Mr. Brown. We have the capability of normally 3 to 5 days to 
be able to get through the blackout. 

Mr. Horn. Let’s hope it does. 

On the provider testing with contractors, we know it has been 
limited, and until these data exchanges between the providers and 
contractors are future-date tested, the ability of these entities to 
process Medicare claims in a future-date environment is unknown. 
Why doesn’t HCFA do the end-to-end testing program to include 
providers? Is it too late to include them or what? Or are they just 
ornery? 

Dr. Christoph. Well, they are certainly not ornery, sir. 

We have done end-to-end testing. As you know, the claims proc- 
essing systems are batch systems. They don’t operate in the same 
sense that credit card transactions occur, but claims are batched up 
at the beginning, whether they are submitted electronically or on 
paper and, that point, defines the one end of the claims processing 
system. They then go through the system and are adjudicated. It 
is on the back end of the process that the instructions for payment 
or printing of notices, such as beneficiary notices, come out. That 
is the other end. 

We have engaged in end-to-end testing, everything in between, 
including a connection to our common working file that is tested 
in a future-date environment. 

We have tried to cover the front end where claims come in by re- 
quiring submitters to submit claims in the proper 8-digit year for- 
mat. April 5th of this year we set a hard date, and by and large 
now everyone is using that. 

So that means that once a claim hits us and if it is in the proper 
format, we can process it. 

Now the difficulty is in determining whether or not providers or 
submitters can actually get us a bill. It is possible to take existing 
systems that a submitter has and put bridge software in place and 
translate the dates so that it is in the proper format, but that does 
not tell us anything about the submitter’s system, its readiness or 
the provider’s systems or readiness, and that is why we have en- 
gaged in this outreach effort to reach them and encourage them to 
test. We have made available to them the opportunity to test with 
our contractor’s front ends. 
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Again, we have made that available to them, but getting them 
to come in and test, there is some reluctance there to test. Perhaps 
they are not ready. Perhaps they just don’t feel that it is necessary. 
We think that it is, and that is why we have been strongly encour- 
aging them to do so. 

Mr. Horn. Well, as I understand it, the General Accounting Of- 
fice has informed us that the status of contractor business con- 
tinuity plans is unknown because the HCFA never requested de- 
tailed plans from these contractors. Is that true or have we 
changed that now? 

Dr. Christoph. We changed that. Some time — and I can’t tell 
you exactly when, but it was fairly recently, we did send a require- 
ment to the contractors to make that information available, to have 
those documents onsite available, and we are going to be checking 
and reviewing those on our next round of visits. We have had on- 
site staff looking at them. We have had the IV&V folks going with 
us for all of our oversight on the contractors. As we go out and re- 
view their status and progress, we will be reviewing that docu- 
mentation, and we have invited GAO to participate on some of 
those visits with us. So we are trying to get that paper documenta- 
tion. 

I might add that the fact that we came through Hurricane Floyd 
so well, quickly making up for the 2 days that the processing cen- 
ters were shut down there testifies to the quality of our contin- 
gency readiness. The Florida data center handles the claims from 
6 States worth of fiscal intermediaries. They didn’t have power for 
2 days. They came up again after the hurricane passed through 
and made up all of that backlog. One of the contractors transferred 
its operations to a hot site in Connecticut and maintained oper- 
ation. 

So we believe that those contingency plans are real because we 
have exercised them, but without being able to present GAO with 
a documentation to back that up, of course, they came out with 
their conclusion. But I believe it is there because we have dem- 
onstrated, as in the hurricane, that we can operate through that. 

Mr. Horn. Since this is a paper processing operation, what is the 
typical contingency plan? How would you boil it down? 

Dr. Christoph. I am not sure that there is a typical contingency 
plan. The contingency plans look at the impact of whatever the 
event is. In the case of Hurricane Floyd, it was a power outage. We 
are required to pay claims — electronic claims after the 14th day. 
We look at the duration — the possible duration of the event and de- 
cide on that basis how we are going to deal with it. In this case, 
the duration was relatively short, and we dealt with the contin- 
gency of not being able to process claims those 2 days by adding 
time in the evening in order to make up that processing. That, in 
effect, took care of fire problem transparently to the submitters. 

Mr. Horn. Assuming that, given modern medicine and all of the 
replacement parts that we get, that we might be around in the 
third millennium, if you could start over what would you do dif- 
ferently to solve the year 2000 computer program? 

Dr. Christoph. As a systems programmer who has cut code, I 
would certainly do a better job at the front end of writing code, an- 
ticipating these problems. I think 20, 30 years ago when we were 
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writing such code, no one believed that the software would be 
around this long, and I think if we are more careful about how we 
develop and write software up front and anticipate these problems, 
the problems won’t be there. 

Mr. Horn. Was this mostly COBOL at Medicare? 

Dr. Christoph. Yes, 80, 90 percent of the code is COBOL. There 
is a significant portion of assembler language, though. 

Mr. Horn. Interesting. 

Do any more questions come to mind? 

Mr. Turner. No. 

Mr. Horn. We are going to ask that the record be held open for 
10 days. We understand that some managed care organizations 
would like to add their statements, and that is fine. We will give 
them to you and if you wouldn’t mind responding to their state- 
ments so we can get a complete record. All of the witnesses actu- 
ally can do that. 

I thank you for your testimony. I am especially pleased to learn 
that the Health Care Financing Administration decided to require 
year 2000 certifications from the managed care organizations that 
currently provide managed care to 6.9 million seniors in the coun- 
try. We have encouraged these Americans to enter managed care 
programs as a way to curb rising health care costs. The very least 
that we can do for those who have joined these programs is to en- 
sure that their medical care will continue, whether the date is 
December 31, 1999, or January 1, 2000. 

Obviously, much work remains in all segments of the Medicare 
program. Time is running out. That combination of events demands 
that, at a minimum, HCFA and its vendors and contractors need 
to immediately begin coordinating a thorough end-to-end business 
continuity plan. 

That said, and thanking the staff here, we will adjourn. 

J. Russell George, the staff director and chief counsel, is back 
against the wall; and Matt Ryan is right next to me. Bonnie Heald, 
professional staff member/communications director, against the 
wall. Chip Ahlswede is the clerk, and P.J. Caceres is an intern. 

With the Technology Subcommittee on Science, we have Jeff 
Grove, staff director; Ben Wu, who has been with us, professional 
staff member; Joe Sullivan. 

And from Mr. Turner’s staff on the minority we have Trey Hen- 
derson, minority counsel, Jean Gosa, staff assistant. 

And the Technology Committee ranking people are Michael 
Quear, the professional staff member, Marty Ralston, staff assist- 
ant. 

And your testimony was so fascinating we had to have three 
court reporters, so Melinda Walker, Doreen Dotzler and Cindy 
Sebo. 

With that, we thank all of you for coming and spending your 
time and advice with us. Thank you. 

We are adjourned. 

[Whereupon, at 3:31 p.m., the subcommittee adjourned.] 
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